Fortra GoAnywhere CVE-2025-10035 was exploited a week before disclosure, enabling pre-authentication remote code execution.

Chinese-speaking actor uses BadIIS to poison search results in East Asia, enabling remote access and SEO fraud.

Nagpur: The Maharashtra State Electricity Distribution Company Limited (MSEDCL) has rolled out an automated approval system ...

Unknown intruders – likely China-linked spies – have broken into "numerous" enterprise networks since March and deployed ...

Cyber security researchers have uncovered a sophisticated distributed denial-of-service (DDoS) operation that they say blurs ...

IntroductionZscaler ThreatLabz regularly monitors for threats in the popular Python Package Index (PyPI), which contains open source libraries that are frequently used by many Python developers. In ...

The Iranian-linked Nimbus Manticore, which has run fraudulent job recruiting campaigns primarily in the Middle East, is targeting Western Europe in a new operation that includes using an enhanced ...

In 1989, Sir Tim revolutionized the online world. Today, in the era of misinformation, addictive algorithms, and extractive ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web ...

ESET researchers reveal how the notorious APT group Turla collaborates with fellow FSB-associated group known as Gamaredon to ...

When a clickjack attack managed to hijack a passkey authentication ceremony, were password managers really to blame? ZDNET's investigation reveals a more complicated answer.