Coyote malware uses Windows UI Automation to target 75 banks and crypto sites in Brazil, risking credential theft.

CISA flags Microsoft SharePoint flaws under active attack by Chinese hackers. U.S. agencies must patch by July 23 ...

The cybersecurity firm noted that the vulnerabilities could allow attackers to inject unsafe XML entities into the web ...

New BeyondTrust research shows statistical models outperform heuristics in detecting Kerberoasting attacks. Better accuracy, ...

Google has announced the launch of a new initiative called OSS Rebuild to bolster the security of the open-source package ...

The activity has been attributed to a threat actor tracked as Mimo (aka Hezb), which has a long history of leveraging N-day security flaws in various web applications to deploy cryptocurrency miners.

Cisco confirms active exploitation of critical ISE bugs, exposing systems to remote root access. Urgent patching advised.

First detected in July 2024, DCHSpy is assessed to be the handiwork of MuddyWater, an Iranian nation-state group tied to MOIS ...

Microsoft links SharePoint attacks to three China-based groups; flaws allow code execution and data theft on unpatched ...

The China-linked cyber espionage group tracked as APT41 has been attributed to a new campaign targeting government IT ...

Ghost Crypt, which was first advertised by an eponymous threat actor on cybercrime forums on April 15, 2025, offers the ...

Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.