Cyber Security

U.S. federal agencies have warned of an active cyber threat targeting critical infrastructure organizations with the … U.S. Warns of AI-Assisted Attacks Targeting Siemens PLCs and Critical InfrastructureRead more

Cybersecurity researchers have disclosed a critical security vulnerability in isolated-vm, a widely used open-source Node.js library … Critical isolated-vm Vulnerability Enables Node.js Sandbox Escape and Potential RCERead more

Update: This article has been updated to clarify that the vulnerability has not been exploited in … Microsoft Says Critical Entra ID Vulnerability CVE-2026-69836 Was Not Exploited in the WildRead more

A previously undocumented cyber espionage operation, dubbed SilkParasite, has been observed targeting government organizations across Central … SilkParasite Cyber Espionage Campaign Targets Central Asian Governments With New RATsRead more

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical security vulnerabilities to its … CISA Warns of Four Critical Vulnerabilities Being Exploited in the WildRead more

Apple has issued a new round of threat notifications to customers who may have been targeted … Apple Sends Spyware Threat Notifications to Users in 110 CountriesRead more

Afghan telecommunications providers and critical infrastructure organizations across South Asia are being targeted in an ongoing … New PATCHCORD Backdoor Targets Afghan Telecom and South Asian Critical InfrastructureRead more

A massive campaign involving 737 free VPN and proxy browser extensions has been uncovered, with the … 737 Chrome VPN Extensions Exposed for Secretly Routing Browser Traffic Through SOCKS5 ProxiesRead more

Windows Plug and Play (PnP) can potentially be abused to turn legitimate, signed vendor software into … Windows Plug and Play Attack Can Turn Signed Vendor Software Into SYSTEM AccessRead more

Security researchers have uncovered 77 malicious extensions on the Open VSX Marketplace that masqueraded as legitimate … 77 Malicious Open VSX Extensions Found Stealing Developer and CI Environment DataRead more