Microsoft confirms three China-linked APTs (Linen Typhoon, Violet Typhoon, Storm-2603) are actively exploiting SharePoint zero-days (CVE-2025-53770, -53771) to extract MachineKeys and maintain persistent access.

ANY.RUN uncovers DeerStealer, a new infostealer combining LNK files and LOLBins (like mshta.exe) for a multi-stage, stealthy attack that bypasses detection and exfiltrates sensitive data.

A 158-year-old UK transport firm, Knights of Old, declared bankruptcy and lost 700 jobs after an Akira ransomware attack exploited a weak password, encrypting all operational data.

Cisco warns of active, confirmed exploitation of three critical ISE zero-days (CVSS 10.0), allowing unauthenticated RCE. Patch ISE 3.3 and 3.4 immediately as public exploits are available.

The British government is set to ban public sector and critical infrastructure organizations, including the NHS and schools, from paying ransoms to cybercriminals.

Dual US-Chinese citizen Chenguang Gong pleaded guilty to stealing 3,600 confidential military tech documents, including missile defense sensors, potentially for China's benefit.

Windows 11 24H2 preview update (KB5062660) introduces 29 new features, including Rapid Machine Recovery, Recall in EEA, a new AI assistant, and a black crash screen.

A high-severity flaw (CVE-2025-8069) in AWS Client VPN for Windows allows local users to escalate privileges due to an OpenSSL config file path vulnerability.

T-Mobile and Starlink officially launch "T-Satellite," bringing basic mobile messaging to remote and disaster-stricken areas of the US via 650+ low-Earth orbit satellites.

Proton introduces Lumo AI Assistant, an end-to-end encrypted AI tool that guarantees no user data is used for training, offers a "Ghost Mode," and runs on open-source models in Europe.

Apple introduces AppleCare One, a new $20/month subscription covering up to three Apple devices. It streamlines protection and allows enrollment for devices up to four years old.

The UK government is drafting new legislation to criminalize ransomware payments by public sector bodies (NHS, schools, councils) to deter attacks and cut off funding to cybercriminals.

2 Best Indian VPS Providers with cheapest pricing

Existen múltiples maneras de controlar la subida de archivos, entre ellas se encuentra la validación del tipo de archivo mediante el…

Global Wave of State-Sponsored Cyberattacks Highlights Vulnerability of Unpatched Systems Across Sectors

A deep dive into threat hunting methodology, detection engineering, and building effective defenses against nation-state adversaries

In today’s online world, shady things happen all the time. This includes someone trying to get into your email without permission or…

Cybersecurity may sound complicated, but it is essential for every business, no matter how small. Many small businesses and people without…

Imagine accessibility tools, originally designed to help users with disabilities, being turned into weapons to silently steal your bank…

Weekly Bootcamp Task ID-Networkers — Use case Rules

Need a password? Going with ‘#123#’, ‘PASSWORD’, or ‘password123’ is practically a canon event in everyone’s digital life. Alternatively…