Microsoft warns that China-backed APTs (Linen Typhoon, Violet Typhoon, Storm-2603) are actively exploiting critical SharePoint zero-days (CVE-2025-49704, -49706) in unpatched on-premises servers.

CISA, FBI, and HHS issue a joint advisory on Interlock ransomware, active since Sep 2024, targeting businesses and critical infrastructure with double extortion tactics.

Proofpoint reveals a surge in RFQ scams where fraudsters impersonate procurement officials to steal high-value goods by exploiting Net 15/30/45 financing terms.

Google released an urgent Chrome update fixing two high-severity type confusion vulnerabilities (CVE-2025-8010, CVE-2025-8011) in its V8 JavaScript engine. Update immediately!

Weeks after a major takedown, Lumma Stealer has resurfaced with new stealth tactics, exploiting cracked software, fake CAPTCHAs, and GitHub to resume its credential-stealing operations.

A critical unauthenticated SSRF vulnerability (CVE-2025-54122, CVSS 10.0) in Manager.io's accounting software allows bypassing network isolation and exfiltrating sensitive data from cloud environments.

Windows 11 Insiders are testing a new local network migration feature for user files and settings, simplifying PC setup. However, installed applications still require manual reinstallation.

A new report traces China's cyber power to the "Red Hackers" of the 1990s and 2000s, who laid the groundwork for its sophisticated state-backed operations.

The Mimo threat actor has broadened its scope to Magento, employing advanced persistence, fileless execution, cryptojacking, and proxyjacking in a sophisticated new campaign.

NVIDIA announces CUDA support for RISC-V processors, expanding its AI and GPU acceleration technology to a more diverse ecosystem and strengthening its position in emerging markets.

The UK government is reportedly reconsidering its secret demand for an iCloud backdoor after US criticism and Apple's decision to disable Advanced Data Protection for UK users.

AmateraStealer (formerly ACRStealer) has significantly evolved, using low-level NTAPIs, Heaven's Gate, and multi-layered encryption to evade detection and steal sensitive data.

Lookout uncovers an evolved DCHSpy Android spyware linked to Iran's MuddyWater APT, targeting high-value geopolitical entities with new Starlink and VPN lures.

In the digital age, where software powers everything from your morning coffee machine to billion-dollar enterprises, vulnerabilities are…

Your Login Page Isn’t Safe,Unless You Do This

Understanding the technical details, business impact, and response strategies for the zero-day vulnerability affecting SharePoint Server…

Ransomware groups are using AI across multiple stages of attack — targeting, access, negotiation, and encryption. The examples below are…

A significant zero-day vulnerability in Microsoft’s on-premises SharePoint software has been actively exploited in a global hacking…

The next step is to access the pfSense web interface from the Kali Linux virtual machine. In a web browser, I enter the LAN IP address…

An article focusing on some of the common attacks related to an Active Directory