A deep dive into exploiting weak rate limiting in GraphQL APIs and how attackers bypass protection mechanisms.

Sucuri uncovers a complex multi-stage malware campaign infecting WordPress sites via header.php to deliver a hidden RAT (client32.exe) and evade detection.

The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.

The International Criminal Court (ICC) in The Hague was hit by a sophisticated, targeted cyberattack last week, the second in two years, prompting an investigation into the breach.

Microsoft will end password support in its Authenticator app by August 1, 2025, phasing out autofill in July. Users must migrate passwords to Edge or other managers.

Google has urgently patched a high-severity zero-day (CVE-2025-6554) in Chrome's V8 JavaScript engine. This type confusion flaw is actively exploited in the wild, risking RCE.

Proton sues Apple in US federal court, accusing it of an illegal App Store monopoly that stifles competition, harms developers, and compromises user privacy.

Canada has ordered Hikvision to shut down nationwide, citing national security concerns. The ban prohibits government use of its products, but Hikvision calls it baseless and biased.

CISA, FBI, and NSA warn of potential cyberattacks from Iranian-affiliated actors on vulnerable U.S. critical infrastructure, urging vigilance and defense hardening.

The FBI briefed Congress on mobile security after Chief of Staff Susie Wiles' phone was hacked. Senator Wyden criticized the FBI's "inadequate" advice, urging advanced protections against zero-click exploits.

A ransomware attack on Swiss health foundation Radix (June 16) by Sarcoma group led to stolen and encrypted data, including federal administration info, published on the dark web.

Northern Europe's largest Apple reseller, Humac, has been hacked by the Kraken group, who leaked confidential company data, including financial reports and customer records, on the dark web.

Iranian hackers "Robert" claim to have 100GB of Trump aides' emails, threatening to sell access. The group resurfaced after U.S. airstrikes on Iran, escalating cyber pressure.

Google has signed a historic deal to purchase 200MW of fusion energy from Commonwealth Fusion Systems' planned Virginia reactor by the early 2030s, boosting clean power for AI.

As a programmer with a solid background in software development, I’ve always been fascinated by how systems work under the hood —…

India’s Fintech sector is at the forefront of a digital revolution, with digital payments powering a market projected to reach USD 1.5…

As blockchain adoption grows, more investors and developers are looking for projects that combine practical use cases with sound economic…

Gradium is a lightweight, high-performance Layer 1 blockchain purpose-built for cybersecurity innovation. Designed with developers in mind…

India’s digital world is rapidly evolving, and with it, the threats posed by sophisticated cybercrimes like deepfake scams and AI-driven…

Today I would like to share walkthrough how i solve puzzle CTF of websecacademy in Portswigger website. Let me open it with one single…

Are your digital habits putting you at risk — every single day?