Google GTIG: 90 zero-day flaws exploited in 2025 as enterprise targets grow

1 month ago

Google’s GTIG reports 90 zero-day vulnerabilities exploited in the wild in 2025, up from 78 in 2024, with a growing…

Phobos Ransomware admin faces up to 20 years after guilty plea

1 month ago

Russian national Evgenii Ptitsyn (43) pleaded guilty in the U.S. for his role in the Phobos ransomware operation. Russian national…

Russian APT targets Ukraine with BadPaw and MeowMeow malware

1 month ago

Researchers uncovered a Russian campaign targeting Ukrainian entities with new malware families BadPaw and MeowMeow delivered through phishing emails. Researchers…

Operation Leak: FBI and Europol dismantle LeakBase Cybercrime forum

1 month ago

The Federal Bureau of Investigation seized the LeakBase cybercrime forum in an international crackdown led by Europol. The Federal Bureau…

Google uncovers Coruna iOS Exploit Kit targeting iOS 13–17.2.1

1 month ago

Google warns of the Coruna iOS exploit kit, using 23 exploits across five chains to target iPhones running iOS 13–17.2.1,…

Cisco fixes maximum-severity Secure FMC bugs threatening firewall security

1 month ago

Cisco patched two critical Secure FMC vulnerabilities that could let attackers gain root access to managed firewalls. Cisco addressed two…

Automate or orchestrate? Implementing a streamlined remediation program to shorten MTTR

1 month ago

Security teams want lower MTTR, but flaws persist. How to use automation vs. orchestration to reduce risk effectively? Almost all…

LastPass warns of spoofed alerts aimed at stealing master passwords

1 month ago

LastPass warns of a phishing campaign using fake security alerts about unauthorized access or password changes to steal users’ master…

From phishing to Google Drive C2: Silver Dragon expands APT41 playbook

1 month ago

APT group Silver Dragon, linked to APT41, targets governments via server exploits and phishing, using Cobalt Strike and Google Drive…

U.S. CISA adds Qualcomm and Broadcom VMware Aria Operations flaws to its Known Exploited Vulnerabilities catalog

1 month ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Qualcomm and Broadcom VMware Aria Operations flaws to its Known Exploited Vulnerabilities catalog.…

This website uses cookies.