Security researchers have detailed how a race condition in the Discourse forum software allowed attackers to inject malicious code through image uploads.
A malware campaign named Midnight Mimosa is pre-baked into the firmware of low-cost Android devices sold in more than 150 countries, according to SecurityWeek.
Meta Platforms restricts advertising from ByteDance and third-party campaigns linking to TikTok across multiple regions, intensifying social media competition.
Dark Reading reports that the security weaknesses of an executive’s family members can serve as the primary entry point for cyberattacks.
A vulnerability in the GoBalance tool enables attackers to recover secret keys from public data and hijack dark-web site addresses.
The UK, US, and allied nations have published a joint warning detailing cyber threats associated with a Chinese technology firm.
A surge of cyberattacks on Japanese firms in September has exposed vast amounts of data, prompting officials to mandate immediate security audits.
Microsoft warns that unsupported Windows versions will cease receiving security patches following next year's certificate rotation.
Attackers compromised the .gh, .sl, and .as country-code top-level domains to issue HTTPS certificates for several Google properties.
Comparitech data shows a surge in claimed attacks during the third quarter, with finance, tech, and healthcare sectors facing significant increases in volume.
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise victims.
Leader of the Your Mule Cashout network pleaded guilty to orchestrating a sophisticated money laundering scheme across the U.S. and Europe from 2007 to 2014.
The 30-year-old pleaded guilty to drug conspiracy and will forfeit over $100 million in Bitcoin and Virginia properties.
Microsoft Security advises organizations to begin testing post-quantum authentication now via its new TLS Pilot Program to prepare for future cryptographic shifts.
The FBI disrupted Flax Typhoon’s MicroScan and FishHub tools, seizing domains linked to a Chinese firm targeting global critical infrastructure.
The FBI and six other nations say hackers tied to Integrity Technology Group accessed stolen emails from government and health sectors in Southeast Asia.
Microsoft plans to significantly reduce the 1 TB OneDrive storage allowance for each member of shared Microsoft 365 family subscriptions.
The National Cyber Security Centre has issued an advisory after ASOS stated it is probing a cyber incident that may have exposed personal customer information.
Attackers exploited stolen employee credentials to breach ASOS via the Simon AI marketing platform, confirming a significant security incident.
OpenAI says it disrupted a far-reaching Russian influence operation tied to the Politology network that targeted schools and officials.
Cyberattacks on two major Protestant churches in South Korea may have compromised sensitive financial and personal records of hundreds of thousands of congregants.
New legal documents reveal ExxonMobil’s internal deliberations on climate science, adding evidence to allegations of a decades-long campaign to mislead the public.
CrowdStrike reports that attackers weaponized the ARTEX AI penetration testing tool to steal data from South Korean financial firms in late 2026.
While all enterprises conduct security awareness training, the tangible benefits of these programs remain debatable and require strategic adjustment.