Big firms like Microsoft, Salesforce, and Google had to react fast — stopping DDoS attacks, blocking bad links, and fixing ...

Fluent Bit, deployed in billions of containers, has five new flaws enabling log tampering, remote code execution, and cloud ...

ShadowPad malware is being delivered through an actively exploited WSUS vulnerability, granting attackers full system access.

CrowdStrike shows Chinese AI DeepSeek-R1 quietly weakens code security when prompts mention Tibet, Uyghurs, or Falun Gong.

Real-time masking, agentless access, and full-motion monitoring enhance insider threat defense and audit readiness without IT ...

CISA adds exploited Oracle Identity Manager CVSS 9.8 flaw to KEV catalog as agencies rush to patch zero-day attacks.

APT31 secretly targeted Russian IT from 2022–2025 using cloud services, social media commands, and CloudyLoader malware to ...

Matrix Push C2 abuses browser notifications for fileless, cross-platform phishing, while Velociraptor misuse rises after a ...

Salesforce has warned of detected "unusual activity" related to Gainsight-published applications connected to the platform.

The vulnerability, tracked as CVE-2025-41115, carries a CVSS score of 10.0. It resides in the System for Cross-domain ...

Eternidade Stealer spreads via WhatsApp hijacking, using Python scripts and IMAP-driven C2 updates to target Brazilian users.

Fortinet has warned of a new security flaw in FortiWeb that it said has been exploited in the wild. The medium-severity ...