Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading ...
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest ...
A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate ...
Password resets are one of the easiest ways for attackers to bypass security controls. Specops Software shows how helpdesk ...
The United Kingdom's National Cyber Security Centre (NCSC-UK) and international partners warned that China-nexus hackers are ...
Microsoft confirmed that a recent Microsoft Edge browser update introduced a bug that prevents Windows users from joining ...
CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has ...
Recently observed Trigona ransomware attacks are using a custom, command-line tool to steal data from compromised ...
Dutch cosmetics giant Rituals disclosed a data breach after attackers stole the personal information of an undisclosed number ...
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.