HellCat and Morpheus ransomware share identical code, relying on the Windows Cryptographic API for encryption.

The BC malware has also been the subject of an independent analysis by Sophos, which attributed the artifacts to a threat ...

New research by web exposure management specialist Reflectiz reveals several alarming findings about the high number of ...

Critical SonicWall zero-day (CVE-2025-23006) in SMA 1000 appliances fixed. Rated 9.8 CVSS; patch now to prevent active ...

Seven vulnerabilities, including BootHole and PixieFail, in Palo Alto firewalls risk Secure Boot integrity and enable sophisticated attacks.

Fake CAPTCHA checks are spreading Lumma Stealer malware worldwide, targeting telecom, healthcare, and banking sectors ...

Google identifies TRIPLESTRENGTH targeting cloud platforms like AWS and Azure for cryptojacking and ransomware.

A third vulnerability patched by Cisco is CVE-2025-20128 (CVSS score: 5.3), an integer underflow bug impacting the Object ...

PlushDaemon APT targets South Korean VPN with SlowStepper backdoor. Multistage DNS C&C protocol aids espionage.

"Customers are strongly advised to apply the January 2025 Critical Patch Update for Oracle Agile PLM Framework as it includes ...

Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of ...

DHS terminates advisory committees, including CSRB, halting investigations into Chinese cyberattacks and AI safety.