Researchers have uncovered a vulnerability in the UEFI firmware implementations used on motherboards from several major manufacturers, including ASUS, Gigabyte, MSI, and ASRock. The flaw affects the earliest stage of system boot and enables...
The U.S. Treasury is cautiously suggesting that the ransomware market may be beginning to cool. In a new report released Thursday by the Financial Crimes Enforcement Network (FinCEN), officials note that after the record...
Groups operating in the interests of the DPRK continue to aggressively expand their infrastructure for cyber espionage, financial attacks, and long-term persistence within compromised systems. This is evidenced by the findings of a joint...
The leak of a fourth episode linked to the APT35 hacking group—also known as Charming Kitten—dramatically reshapes perceptions of the organization. In the previous three installments, meticulously analyzed by researcher Nariman Gharib, attention centered...
Check Point researchers have uncovered a new campaign known as the so-called YouTube Ghost Network—a web of hijacked YouTube accounts used to distribute malware disguised as game cheats and pirated software. At the heart...
A newly discovered vulnerability in FreeBSD components responsible for IPv6 configuration allows an attacker on the same local network to remotely execute arbitrary code on a target system. The flaw affects all supported versions...
Have you ever considered how much of your personal time is quietly consumed by those “universally beloved” online advertising banners? More than you might expect. According to a new report from AdGuard, the total...
In an industry where artificial intelligence increasingly sets the rules of the game, one startup has found itself at the center of a high-profile scandal. A hacker known by the alias “Kira” exposed the...
Cisco has warned that threat actors are already exploiting a critical vulnerability in its widely deployed products, one that enables a complete takeover of affected systems, and that no patch was available at the...
Arctic Wolf reports the first confirmed intrusions into customer networks in which attackers logged into FortiGate devices via FortiCloud SSO shortly after the disclosure of two critical authentication-bypass vulnerabilities—CVE-2025-59718 and CVE-2025-59719. According to the...
French law enforcement authorities have arrested a 22-year-old man suspected of orchestrating a recent cyberattack against the country’s Ministry of the Interior. The incident occurred in mid-December and affected the ministry’s internal email servers....
Researchers at iVerify have identified a new Android remote access trojan dubbed Cellik, which blends the capabilities of full-fledged spyware with the ability to masquerade as legitimate applications from Google Play. The malware is...
