Một lỗ hổng Windows Shell nghiêm trọng đang bị khai thác thực tế từ tháng 10 vẫn tiếp tục tạo ra rủi ro lớn cho các môi trường doanh nghiệp. Song song với đó, một lỗi vượt qua xác thực mới trên Barracuda Email Security Gateway cho phép kẻ tấn công chưa xác thực chỉnh sửa cấu hình thiết bị, đòi hỏi s

Madhya Pradesh Computer Emergency Response Team (MPCERT) has issued a cybersecurity advisory following a LockBit ransomware attack on a government computer system. Departments have been urged to strengthen Windows security, restrict remote access, enable multi-factor authentication and maintain back

Red Hat Identity Management (IdM) is a centralized authentication and authorization solution. The security advisory addresses several critical vulnerabilities: CVE-2026-73197 (unauthenticated denial-of-service via unbounded request body rea

Pakistan’s National Cyber Emergency Response Team (National CERT) has issued a cybersecurity advisory warning of potential targeted phishing and malware

An official website of the United States government

Two critical remote code execution vulnerabilities (CVE-2026-109618, CVE-2026-109619) have been publicly disclosed and are actively being exploited. Affecting countless websites, these flaws allow attackers to take full control of compromised servers. If your infrastructure runs PHP, immediate action is required upgrade to PHP 8.2.35 or later immediately to patch this severe security hole. Don't wait — secure your systems now before attackers exploit these zero-day vulnerabilities. Visit our site for a detailed remediation guide. Tools used for generation Text Gemini Narator Azure TTS Clips Pexel Rendering Remotion

CVE-2026-85097 is a critical unauthenticated remote code execution vulnerability in the Bricksforge WordPress plugin, which enables attackers to upload arbitrary files and execute malicious code on targeted WordPress sites. This vulnerabili

TikTok video by The Intel Desk

CERT Polska reported active exploitation of CVE-2026-73570, a critical remote code execution vulnerability in Zimbra Collaboration Suite. The vulnerability is due to a command injection weakness in the SNMP monitoring component when SNMP no

In an increasingly digitalized world, businesses face new challenges from ever escalating  cyber threats, and the legal implications of these incidents are evolving alongside them. A recent case from ...

🚨🔴CYBERALERT 🇫🇷FRANCE🔴 | ⚡10 à 12M de données critiques provenant de l'Agence Nationale des Titres Sécurisés (ANTS) mises en vente pour 170€ sur le "Amazon de la cybercriminalité" 👀Ça date d'au moins 8 mois cette cyberattaque... Voici que l'ANTS, service étatique utilisé https://t.co/nUKdi9OpSi

A wormable XMRig campaign is using a BYOVD exploit and a time based logic bomb to spread cryptomining malware and evade security defenses.

China linked APT31 has launched stealthy cyberattacks targeting Russian IT infrastructure using cloud services, demonstrating advanced persistent threat capabilities.

ハッキンググループUNC2891（LightBasin）による、銀行ATMからの不正な現金引き出しを目的とした攻撃についてGroup-IBが報告。実際の被害が出る前に阻止されたこの攻撃では、銀行のネットワーク上に4G搭載のRaspberry Piを設置するという珍しい初期アクセス獲得手段が用いられていたという。

A cyber alert has been issued in Pakistan to avoid using over a dozen browser extensions that put their personal data at risk, amid

A massive database of 184M login credentials, likely from infostealer malware, has been found exposed online, impacting government and financial portals and posing severe global cybersecurity risks.

Cyber warfare is reshaping Middle East conflicts, blurring deterrence and diplomacy, with global spillovers and strategic uncertainty.

Attackers exploit Teams guest access and unprotected external tenants to bypass Microsoft Defender safeguards