The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting …
Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Service (WSUS) vulnerability with a proof-of-con…
A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malwa…
Does your organization suffer from a cybersecurity perception gap? Findings from the Bitdefender 2025 Cybersecurity Assessment suggest the answer is probably “…
A malicious network of YouTube accounts has been observed publishing and promoting videos that lead to malware downloads, essentially abusing the popularity an…
A path traversal flaw in the Rust async-tar library has people looking harder at archive extraction security on Linux. Researchers are calling it TARmageddon, …
Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code (VS Code) extensions on the Open VSX Registry and the Mic…
Cyber threats move faster than teams can track them. Exploits surface, get patched, and come back wearing new code. Staying secure now means reading the landsc…
Criminals don’t need to be clever all the time; they just follow the easiest path in: trick users, exploit stale components, or abuse trusted systems like OAut…
Security scales poorly. What worked for ten apps starts breaking at a hundred. Each new service adds another scanner, another report, another backlog of findin…
Cybersecurity researchers have shed light on a cybercriminal group called Jingle Thief that has been observed targeting cloud environments associated with orga…
Cybersecurity researchers have shed light on a cybercriminal group called Jingle Thief that has been observed targeting cloud environments associated with orga…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting Motex Lanscope Endpoint Manager to its K…
Security never stays still. Every new vendor connection, cloud integration, or endpoint expands the surface attackers can reach. Phishing kits evolve, fake dom…
Network security doesn't have a perimeter anymore. Laptops, IoT devices, contractors, remote users '' everything connects from somewhere different. That's how …
Government, financial, and industrial organizations located in Asia, Africa, and Latin America are the target of a new campaign dubbed PassiveNeuron, according…
Microsoft Active Directory (AD) has been holding up enterprise identity for decades. It decides who gets in, what they can touch, and when. But the environment…
Ubuntu has issued patches for multiple Linux kernel vulnerabilities now under active review by the security community. The flaws sit inside core components '' …
Wilmington, Delaware, 21st October 2025, CyberNewsWireSendmarc appoints Dan Levinson as Customer Success Director in North America on Latest Hacking News | Cyb…
A new malware attributed to the Russia-linked hacking group known as COLDRIVER has undergone numerous developmental iterations since May 2025, suggesting an in…
A European telecommunications organization is said to have been targeted by a threat actor that aligns with a China-nexus cyber espionage group known as Salt T…
It’s easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent…
ClickFix, FileFix, fake CAPTCHA — whatever you call it, attacks where users interact with malicious scripts in their web browser are a fast-growing source of s…
China on Sunday accused the U.S. National Security Agency (NSA) of carrying out a "premeditated" cyber attack targeting the National Time Service Center (NTSC)…