Hacking
-
Read moreA critical cPanel authentication bypass (CVE-2026-41940) was exploited in a cyber espionage campaign targeting government and military systems. Attackers gained root access, used SQL injection and custom malware tools, and exfiltrated over 4GB of sensitive data including defense and financial records.
-
Read moreResearchers reveal a phishing campaign using Google AppSheet emails to steal 30,000 Facebook accounts through fake Meta Support alerts and login pages
-
Read moreRedSun zero-day exploits Windows Defender to gain SYSTEM access. Learn how NPAV EPS protects against zero-day and privilege escalation attacks.
-
Read moreHackers allegedly stole 10 petabytes of sensitive data from a Chinese supercomputer, including defense files and missile schematics, now being sold online.
-
Read moreFBI and CISA warn of Russian-linked phishing attacks targeting WhatsApp and Signal users to steal accounts using fake support messages and verification code scams.
-
Read moreChina-linked Lotus Blossom group breached Notepad++ hosting, delivering Chrysalis backdoor via tampered updates. Learn the attack details and how to stay safe.
-
Read more8Base ransomware claims to have stolen Volkswagen data—learn about the allegations, company's response, and tips for supply chain security to avoid similar breaches.
-
Read moreFortiGuard Labs exposes Chaos ransomware's aggressive C++ upgrade—selective encryption, large file deletion, and Bitcoin wallet swapping via clipboard hijack. This RaaS threat from ex-BlackSuit actors targets big-game hunting; bolster backups and detection to counter faster, multifaceted attacks.
-
Read morePublic Wi-Fi exposes you to MitM attacks and data theft—learn to spot evil twin hotspots, use VPNs for encryption, enable 2FA, and stick to cellular for sensitive tasks to protect against rising breaches in cafes and airports.
-
Read moreCritical command injection flaw in Figma's MCP server (CVSS 7.5) allows RCE via unsanitized inputs in curl fallback; patched in v0.6.3. Imperva warns of risks in AI dev tools like Cursor—avoid exec with untrusted data amid rising LLM threats like Gemini's ASCII smuggling.