Leading technology firms Ivanti, Fortinet, and SAP have recently issued critical security patches to address multiple vulnerabilities that could potentially allow unauthorized code execution and […]
Archives
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
Cybersecurity experts have identified a significant expansion of the JDY botnet, a covert network linked to Chinese state-sponsored threat actors. This botnet now comprises over […]
GitHub to Disable npm Install Scripts by Default in Version 12
GitHub has announced significant changes in the upcoming npm version 12, scheduled for release next month, aimed at enhancing security within the Node.js ecosystem. A […]
OceanLotus Targets Vietnamese Investors with SPECTRALVIPER Malware
The Vietnam-aligned cyber espionage group known as OceanLotus has been implicated in two distinct campaigns targeting domestic entities and stock investors through the deployment of […]
AI’s Acceleration of Exploits Challenges Traditional Vulnerability Management
For decades, organizations relied on a buffer period between the discovery of software vulnerabilities and their potential exploitation. This interval allowed security teams to assess, […]
Shai-Hulud Worm Code Leaked, AI Agents Phished, and Claude Code Patch Released
In a significant development, the source code for the Shai-Hulud worm has been leaked online, raising concerns about potential widespread exploitation. This worm, known for […]
Cybersecurity Stars Awards 2026: Celebrating Excellence Across 95 Categories
The 2026 Cybersecurity Stars Awards have unveiled their winners, recognizing outstanding contributions across 95 subcategories within four primary categories. This annual event aims to spotlight […]
The Gentlemen Ransomware Expands to 478 Victims with Worm-Like Capabilities
The Gentlemen ransomware group, also known as Phantom Mantis, has significantly escalated its operations, now claiming 478 victims. This expansion is attributed to the group’s […]
GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition
A newly disclosed exploit, dubbed ‘GreatXML,’ enables attackers to bypass Windows BitLocker encryption by leveraging vulnerabilities in the Windows Recovery Environment (WinRE). This exploit allows […]
OpenClaw AI Agent Vulnerabilities Expose Users to Code Execution and Data Leaks
Recent research has uncovered significant security vulnerabilities in OpenClaw, a widely used self-hosted AI agent. These flaws enable attackers to execute arbitrary code and extract […]