Fortra GoAnywhere CVE-2025-10035 was exploited a week before disclosure, enabling pre-authentication remote code execution.

Chinese-speaking actor uses BadIIS to poison search results in East Asia, enabling remote access and SEO fraud.

Nagpur: The Maharashtra State Electricity Distribution Company Limited (MSEDCL) has rolled out an automated approval system ...

Unknown intruders – likely China-linked spies – have broken into "numerous" enterprise networks since March and deployed ...

Cyber security researchers have uncovered a sophisticated distributed denial-of-service (DDoS) operation that they say blurs ...

In 1989, Sir Tim revolutionized the online world. Today, in the era of misinformation, addictive algorithms, and extractive ...

The Iranian-linked Nimbus Manticore, which has run fraudulent job recruiting campaigns primarily in the Middle East, is targeting Western Europe in a new operation that includes using an enhanced ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web ...

ESET researchers reveal how the notorious APT group Turla collaborates with fellow FSB-associated group known as Gamaredon to ...

When a clickjack attack managed to hijack a passkey authentication ceremony, were password managers really to blame? ZDNET's investigation reveals a more complicated answer.

The ShadowV2 DDoS operation, discovered by Darktrace, uses a command-and-control framework hosted on GitHub CodeSpaces, a ...