Real cyber-threats unfolding around the world right now — ransomware, phishing, malware, breaches and zero-day exploits. Click any threat to see what happened and exactly how to stay protected.
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, tha…
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched i…
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion…
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, includi…
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspe…
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to …
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam,…
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells o…
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthent…
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector compa…
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing…
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Wi…
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts …
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave …
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizatio…
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to ta…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Co…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immedi…
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and …
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of acti…
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structur…
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified …
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Win…
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing …
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarmi…
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and oth…
The scary surprises in the largest security update ever include security bypasses and unauthenticated RCEs.
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through s…
Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information wi…
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate…
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secu…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of activ…
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a fam…
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity f…
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts…
View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC <2…
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device an…
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools…
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been de…
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data theft…
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call a…
We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and develo…
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less …
Kaspersky experts have discovered a new MovieReaper campaign. The multi-stage Trojan spreads through movie torrents, su…
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information fro…
Kaspersky GERT experts have uncovered a new campaign by the NightEagle APT, featuring the GhostContainer backdoor and t…
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other sof…
Kaspersky GERT experts have discovered new backdoors used by the Toy Ghouls group. One version of the backdoor uses the…
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drive…
Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRab…
Threat actors are distributing the ValleyRAT backdoor disguised as adware. We analyze the infection chain, from the mal…
The report contains statistics on industrial threats for Q2 2026, including ransomware, miners, spyware and other threa…
This report covers statistics on vulnerabilities, exploits, and C2 frameworks in Q2 2026. For the first time ever, we a…