Risk

Critical analysis of Bitbucket's major service disruption affecting Git operations and database services, with actionable recommendations for development teams and organizations.

Microsoft's Game Assist feature for Edge introduces new browser overlay capabilities with potential privacy and security implications for gaming environments.

Critical analysis of sophisticated malvertising campaign using fake Homebrew sites to distribute AmosStealer malware, targeting Mac and Linux users through Google Ads with $1000/month criminal subscriptions

Technical analysis of the largest DDoS attack in history (5.6 Tbps) with strategic recommendations for enterprise security teams and ISPs

Former CIA analyst's guilty plea reveals critical gaps in classified data handling, highlighting urgent need for enhanced insider threat controls and infrastructure security measures

Critical analysis of TikTok's service restoration in the US market following regulatory challenges, with strategic recommendations for companies facing similar national security oversight

Critical analysis of 7-Zip's Mark of the Web bypass vulnerability (CVE-2025-0411), its implications for enterprise security, and recommended mitigation strategies

Microsoft has released a temporary fix for a critical Outlook crash issue affecting enterprise users when composing emails, with permanent patch scheduled for January 28th deployment.

Critical boot failure bug in Windows Server 2022 affecting multi-NUMA node systems has been patched. Organizations should update servicing stacks immediately.

HPE launches investigation into claims by threat actor IntelBroker regarding theft of source code and sensitive data from developer environments, while implementing immediate security measures.

Analysis of security implications and required actions as Microsoft Exchange Server 2016 and 2019 reach end of support, affecting enterprise email infrastructure security

Ransomware operators combine email bombing with social engineering via Microsoft Teams to trick employees into granting remote access, highlighting critical Microsoft Teams security configuration risks

Critical analysis of CVE-2024-49415 vulnerability affecting Samsung devices running Android 12-14, enabling zero-click remote code execution through RCS messaging

Three Russians indicted for operating cryptocurrency mixing services that laundered over $25M in cybercrime proceeds, including funds from Lazarus Group attacks and ransomware operations

Research reveals how expired domains enabled control of 4,000+ backdoors, compromising government and academic systems globally with minimal cost and effort.

Stealthy JavaScript skimmer conceals itself in WordPress wp_options database tables to harvest payment data from e-commerce checkout pages while evading detection tools

Critical analysis of escalating ESXi ransomware threats demanding $5M+, targeting 8,000+ exposed hosts. Details attack vectors, encryption methods and essential mitigation strategies.

Critical zero-day vulnerability in Ivanti Connect Secure VPN appliances enables unauthenticated remote code execution, with active exploitation by suspected Chinese threat actors deploying sophisticated malware.

Critical vulnerability CVE-2024-50603 in Aviatrix Controller enables unauthenticated remote code execution, leading to cryptomining and backdoor deployment. Immediate patching required.

Critical analysis of two BeyondTrust vulnerabilities added to CISA's KEV catalog and their exploitation in US Treasury breach by Chinese state actors

Russian state-sponsored group UAC-0063 launches sophisticated cyber espionage campaign against Kazakhstan using HATVIBE malware, while SORM surveillance platform expands across Central Asia

Critical vulnerability in Fortinet firewalls (CVE-2024-55591) allows attackers to gain super-admin privileges through exposed management interfaces, impacting versions 7.0.14-7.0.16.

Deep dive into HuiOne Guarantee's emergence as the largest illicit marketplace, facilitating $24B in crypto transactions and enabling sophisticated money laundering operations

Growing SaaS adoption creates expanding attack surfaces through identity risks, data exposure, and third-party vulnerabilities. Analysis shows critical need for automated discovery and governance.

A critical vulnerability in Google's OAuth implementation enables attackers to gain unauthorized access to SaaS applications by acquiring expired domains of defunct startups.

Murdoc_Botnet campaign exploits AVTECH and Huawei vulnerabilities, compromising 1,370+ IoT devices across Asia and Latin America for orchestrating DDoS attacks.

CISA Director Jen Easterly discusses proactive measures to safeguard U.S. infrastructure from PRC cyber threats.

Python backdoor enables persistent access for RansomHub ransomware deployment following SocGholish WordPress plugin exploitation, with lateral movement via SOCKS5 proxy tunneling.

Silverfort researchers uncover critical vulnerability allowing NTLMv1 authentication bypass in Active Directory, undermining organizational security controls through misconfigured applications.

Russian threat actor Star Blizzard adopts new WhatsApp-based spear-phishing tactics targeting diplomatic and Ukraine aid personnel through QR code exploitation, marking significant TTP evolution.

Privacy advocacy group noyb files multiple GDPR complaints against Chinese tech companies for illegal EU data transfers, citing significant risks of government surveillance and data protection violations.

TikTok shuts down in the U.S. amid national security concerns, but Trump proposes an order to potentially extend its operation for another 90 days.

A serious flaw in the W3 Total Cache plugin, impacting over one million WordPress sites, permits unauthorized access to sensitive information.

Complaints highlight risks of user data being transferred to China by TikTok, Temu, and other firms.

Otelier's data breach has compromised millions of hotel guest records, sparking cybersecurity alarms across major hotel brands.

Critical vulnerability in MacOS System Integrity Protection enables root-level exploits and rootkit installation, posing significant risks to system security and reliability

Microsoft patches 161 vulnerabilities including three actively exploited zero-days in Hyper-V, with 11 critical flaws requiring immediate attention.

Critical analysis of industrial control system security reveals dangerous gaps, with only 31% having dedicated SOC capabilities and 52% maintaining proper incident response plans.

North Korean threat actors stole $1.34 billion through cryptocurrency hacks in 2024, while expanding IT worker fraud schemes linked to historical scams dating back to 2016.

Operation 99 uses sophisticated social engineering to target Web3 developers globally, deploying multi-platform malware to steal cryptocurrency and source code

Sophisticated phishing campaign exploits Google Ads platform vulnerabilities to harvest credentials and 2FA codes, using compromised accounts to perpetuate attacks.

Multiple malicious packages discovered across NPM and PyPI repositories targeting Solana wallets, utilizing Gmail SMTP for data exfiltration and implementing destructive capabilities

Critical analysis of how nation-state cyber operations, sanctions, and advanced threats are reshaping the cybersecurity landscape and blurring traditional security boundaries.

DoNot Team APT group launches sophisticated Tanzeem Android malware campaign using fake chat apps to collect sensitive data through exploited permissions and push notification abuse

Research reveals 4.2M hosts vulnerable to tunneling protocol attacks, enabling DDoS and network infiltration through VPNs and routers. Multiple CVEs issued for GRE6 and related protocols.

Comprehensive analysis of emerging remote access scam targeting Ukrainian organizations through fake security audit requests, with documented incidents and mitigation strategies

HackGATE introduces real-time visibility into penetration testing activities, reducing vendor dependence by 65% while enhancing compliance and control over security assessments.