A widespread exploitation campaign has descended upon WordPress sites: attackers are targeting installations that use the GutenKit and Hunk Companion plugins, which harbor critical flaws permitting arbitrary code execution on vulnerable servers. Wordfence, a...
Researchers at SquareX have published a comprehensive report on a newly discovered vulnerability known as AI Sidebar Spoofing—a novel class of attacks that leverages malicious browser extensions disguised as AI sidebar interfaces. This technique...
The malicious modification of Telegram X, discovered by specialists at Doctor Web, turned out to be far more than a simple espionage tool—it is a fully fledged platform for the covert takeover and remote...
Trend Research has detailed a new wave of attacks carried out by the Agenda ransomware group, which has developed the ability to execute a Linux variant of its encryptor within Windows-based environments. This tactic...
Amid the declining effectiveness of traditional malware delivery channels, cybercriminals are increasingly turning to platforms never intended for such purposes. The Check Point Research team has uncovered a vast, distributed network of malicious YouTube...
The South Korean government has announced a sweeping inspection of 1,600 IT systems across the sectors of public administration, finance, and telecommunications, following a series of high-profile data breaches that have sparked public outcry...
The U.S. Department of Justice has charged 31 individuals, including alleged members of organized crime and former NBA players, in connection with a large-scale poker fraud scheme that exploited hacked Deckmate 2 automatic card...
Hackers have begun actively exploiting a newly disclosed vulnerability in the Windows Server Update Services (WSUS) component. The flaw, tracked as CVE-2025-59287, already has a publicly available proof-of-concept (PoC) exploit, dramatically increasing the likelihood...
The Unit 42 team at Palo Alto Networks has released an in-depth investigation into a new international cybercrime campaign driven by financially motivated actors, codenamed Jingle Thief. Operating out of Morocco, the group specializes...
Group-IB’s Threat Intelligence team has published a detailed analysis of a new cyber-espionage campaign very likely attributable to the MuddyWater APT. The intrusion began with a compromised mailbox that the attackers accessed via a...
Beginning with the October 2025 Windows security updates, File Explorer now automatically blocks the preview of files downloaded from the internet. Introduced in the October 14, 2025 update, this change aims to prevent the...
The Fedora community has officially adopted a comprehensive policy governing the use of artificial intelligence in the creation and maintenance of its Linux distribution. The decision follows months of deliberation sparked by a community-wide...
