Popular WordPress plugins have found themselves at the center of a supply chain attack, where the products themselves were not compromised directly. Instead, attackers targeted the infrastructure responsible for distributing them. Three plugins from...
Payroll systems rarely attract attention until a single edited bank detail quietly turns a routine paycheck into a direct transfer to criminals. Researchers at BushidoToken Threat Intel have detailed a new financially motivated campaign...
An air-gapped network offers no guarantee of safety when adversaries are willing to spend years probing for a way in. Researchers at Sygnia have released the full details of Operation Highland, a campaign in...
Security researcher Hyeonwoo Kim has disclosed a vulnerability named ITScape that disrupted behavior within KVM on arm64 and allowed a guest virtual machine to break out onto its host system. Critical Severity in the...
Old internet forums may no longer sit at the center of digital life, but many continue to hold private messages, restricted sections, and accounts carrying years of personal history. A critical vulnerability discovered in...
Sometimes finding a vulnerability proves far easier than extracting an honest response from the vendor. That is precisely the experience of security researcher MrBruh, who uncovered a serious flaw in AMD software and ultimately...
Live wallpaper extensions may look like a harmless way to refresh a browser’s appearance, but researchers recently uncovered 152 potentially dangerous extensions lurking in the Chrome Web Store. Disguised as live wallpapers, these add-ons...
An Iran-linked hacking group called Handala has claimed it gained access to data from the FBI’s FPV drones, and the group is now threatening participants in the upcoming World Cup. According to a report...
Full-disk encryption safeguards data only until the recovery environment emerges as a catastrophic weak link. Recently, the infamous cybersecurity researcher, Nightmare Eclipse, unveiled a novel Windows vulnerability. They dubbed this flaw GreatXML. Specifically, this...
The Hidden Threat Within Utility Modules Colossal corporate networks frequently suffer breaches through obscure utility modules. Indeed, these quiet systems harbor valuable employee, student, and client archives for decades. Recently, the notorious ShinyHunters syndicate...
In the mercenary realm of commercial surveillance, judicial injunctions rarely deter those who have engineered lucrative empires upon human vulnerabilities. Recently, Meta disclosed audacious new attempts by the notorious NSO Group to compromise WhatsApp...
A single day of delayed patching could transform a corporate security gateway into a highly convenient ingress point for malicious actors. Shadowserver experts recently reported massive exploitation attempts targeting a critical Ivanti Sentry vulnerability....
