A vulnerability has been discovered in early builds of OpenVPN, allowing attackers to execute arbitrary commands on a user’s machine. The flaw affects versions from 2.7_alpha1 through 2.7_beta1 and poses a serious threat to...
In a recent report, researchers from Varonis Threat Labs reminded the cybersecurity community of a deceptive technique used by phishers to disguise malicious links as legitimate ones. This method, based on how browsers render...
Several media outlets have once again circulated false claims of a supposed large-scale data breach affecting Gmail, alleging the compromise of 183 million user accounts. The reports stemmed from an announcement by Troy Hunt,...
The BlueNoroff group — long linked to Lazarus — has begun incorporating generative AI into operations targeting executives and developers of blockchain projects, Kaspersky GReAT researchers reported at the Security Analyst Summit 2025 in...
A newly discovered vulnerability in ChatGPT Atlas, the experimental browser developed by OpenAI, allows attackers to silently inject malicious commands into the AI’s persistent memory, enabling the execution of arbitrary code on behalf of...
Seventy-two nations gathered in Hanoi, Vietnam, to sign the world’s first United Nations Convention on Cybercrime, establishing a global legal framework to counter digital threats. The document—years in the making—is set to become the...
Cyberthreat analysts are reporting active exploitation of a critical vulnerability in Windows Server Update Services (WSUS), identified as CVE-2025-59287. Merely days after Microsoft released an emergency patch and CISA added the flaw to its...
The September attack on the embassy of a European nation in New Delhi has exposed the scale of an extensive espionage operation targeting diplomatic missions across several South Asian countries. Experts at Trellix have...
Midway through this year, specialists at Arctic Wolf uncovered a sprawling malicious campaign that spread across South America, Africa, and Eastern Europe. At its core lay a tool of Brazilian origin known as Caminho...
The Coveware report on ransomware activity for the third quarter of 2025 paints a paradoxical picture. On one hand, mass-scale Ransomware-as-a-Service (RaaS) campaigns continue to flood mid-tier companies; on the other, there is a...
The widespread confidence among companies in their own cyber resilience is colliding with a new wave of threats — this time, driven by artificial intelligence. According to the OpenText Cybersecurity Report 2025, 95% of...
A large-scale phishing campaign targeting LastPass users and clients of major cryptocurrency exchanges began in mid-October, spreading under the guise of official service notifications. LastPass has warned that the attack is orchestrated by the...
