Threat actors are actively compromising poorly managed MySQL servers, using UDFs to inject Gh0stRAT, XWorm, HpLoader, and legitimate Zoho agents for full system control and data theft.

A critical SSRF flaw (CVE-2025-6087) in @opennextjs/cloudflare allows unauthenticated users to proxy arbitrary remote content via /_next/image endpoint.

Elastic uncovers a sophisticated ClickFix campaign deploying the GHOSTPULSE loader to deliver ARECHCLIENT2 malware, leveraging social engineering for credential theft and remote access.

Qilin ransomware is rapidly dominating the RaaS landscape, as rivals like RansomHub and LockBit face collapse, internal chaos, and public defacements by "XOXO from Prague."

A critical flaw (CVE-2025-51381) in KAON KCM3100 Wi-Fi gateways allows local attackers to bypass authentication. Update firmware to version 1.4.8 immediately.

A new wave of invoice-themed phishing emails is distributing the Sorillus RAT across Europe, leveraging legitimate platforms like OneDrive and Ngrok for stealthy delivery.

XDSpy, a covert cyber-espionage group, is back with a sophisticated campaign targeting governments, leveraging an obscure Windows LNK file parsing flaw and new XDigo malware

In today’s connected world, every device you use relies on invisible rules to talk to each other seamlessly. These rules are known as…

Public Wi-Fi is everywhere — in cafes, airports, malls, and hotels. It’s convenient, fast, and free. But behind the ease lies a serious cybersecurity risk that most people don’t even think about…

DevOps + Cloud Security Blog Series by Angie

If “one minute equals money,” consider this: unplanned downtime now costs smaller firms about $427 per minute. For growth-minded companies…

Introduction

My time at HP marked a before-and-after in my professional life. I had the privilege of working with brilliant minds in both Puerto Rico…

By Aditiya Widodo Putra, Cybersecurity & Blockchain Consultant

⚠️ On June 5, 2025, Google confirmed a critical zero-day vulnerability in Chrome that could let attackers hijack your device just by…

When I set out to build HavenAI Secure, I wasn’t just creating another AI demo. I was solving a real problem I’d felt firsthand in security…

In today’s hyper-connected world, social media platforms have become powerful tools for communication and information sharing, and for more…

Securing Large Language Models in the Wild

YouTube CEO Neal Mohan announced Veo 3 AI integration into Shorts this summer, enabling text-to-video creation.

iOS 26 introduces direct eSIM transfer to Android, simplifying cross-platform migration and eliminating the need for carrier intervention.

Two flaws in Versa Director SD-WAN allow authenticated RCE via insecure file uploads and privilege escalation via webhook abuse. PoC code is public.