hacker

New Boss Scam attacks hijack WhatsApp Web sessions using malicious files. Learn how organizations can protect finance teams and endpoints.

Hackers are abusing legitimate ManageEngine UEM/RMM tools to gain remote access. Learn how enterprises can detect unauthorized UEM installations and endpoint abuse.

Hackers are hijacking hotel Wi-Fi networks to deliver fake browser updates that install CornFlake malware, stealing passwords, browser sessions, and Microsoft 365 tokens.

A cyber attack on England’s Department for Education exposed around 607,000 records containing email addresses and phone numbers. Learn what happened and the cybersecurity risks.

Hackers claim to possess a database containing 160 million Decathlon customer records. The alleged breach remains unverified, with Decathlon yet to confirm the incident.

Russian state-backed hackers exploited a Zimbra zero-day vulnerability to steal emails, passwords, and 2FA recovery codes from government and enterprise organizations.

Attackers are exploiting GitHub Actions runners to target vulnerable cPanel and WHM servers, stealing credentials, cloud keys, API tokens, and sensitive configuration data.

Google patches CVE-2026-0073, a critical Android zero-click flaw enabling remote shell access without user interaction. Update devices immediately.

A critical cPanel authentication bypass (CVE-2026-41940) was exploited in a cyber espionage campaign targeting government and military systems. Attackers gained root access, used SQL injection and custom malware tools, and exfiltrated over 4GB of sensitive data including defense and financial records.

Microsoft patches CVE-2026-32202, a Windows zero-click flaw exploited by APT28 hackers to bypass Defender SmartScreen and steal authentication hashes.