Some data breaches achieve global notoriety due to the sheer magnitude of those affected — such as the 2019 Facebook scraping incident, which exposed the records of 553 million users. Others unfold as national...
In its September Patch Tuesday release, Microsoft delivered a sweeping package of updates, addressing 81 vulnerabilities across its products and services. Among them were nine critical flaws, including two zero-day vulnerabilities, which drew the...
Salesloft has announced the restoration of its integration with Salesforce following the incident linked to the Drift platform and its associated technologies. As of the evening of September 7, 2025, synchronization between Salesloft and...
At the end of August, GreyNoise recorded a sharp surge in scanner activity targeting Cisco ASA devices. Experts warn that such waves often precede the discovery of new vulnerabilities in these products. This time,...
Researchers at FortiGuard Labs have documented a new campaign deploying the MostereRAT remote access trojan, which targets Windows systems and leverages legitimate tools such as AnyDesk and TightVNC to maintain covert access. The attack...
Researchers at Silent Push have uncovered infrastructure linked to the Chinese cyber-espionage groups Salt Typhoon and UNC4841. The newly identified sample includes 45 previously unpublished domains, some of which were registered as early as...
Researchers at Arctic Wolf have reported a new campaign, dubbed GPUGate, in which adversaries exploit Google Ads and fraudulent GitHub commits to distribute malware targeting IT firms and developers across Western Europe. Active since...
An independent researcher named Alexander Popov has unveiled a novel exploitation technique for a critical Linux kernel vulnerability, identified as CVE-2024-50264. This use-after-free flaw in the AF_VSOCK subsystem has existed since kernel version 4.8...
Insikt Group has published a comprehensive study on two influence networks that were active during the conflict between India and Pakistan in the spring of 2025. The report highlights Hidden Charkha, which promoted pro-Indian...
A newly disclosed vulnerability in the HTTP/2 protocol, dubbed MadeYouReset (CVE-2025-8671), was revealed on August 13, 2025. The flaw allows an attacker to send specially crafted protocol frames that force the server to repeatedly...