The Invisible Flood of Misconfigured Buckets and Open Databases

The dark web often carries a sense of danger — but with the right precautions, visiting it doesn’t have to result in malware, data theft…

In today’s digital-first world, the importance of cyber security cannot be overstated. With businesses, governments, and individuals…

These are the figures from the first cyberattack that Norway officially attributed to Russia. On April 7, 2025, pro-Russian hackers…

Welcome to this walkthrough of the CyberDefenders lab!

It arrived in a ZIP file, tucked away in a hidden corner of the internet. The listing promised “quality, fresh data.” The price was a few…

From Donald Trump “speaking Yoruba” to fake CEO announcements, AI makes it hard to tell what’s real. Here’s why integrity is important.

Attackers aren’t just guessing passwords anymore — they’re deploying AI-powered bots that adapt in real time, scan smarter, and hide…

Today’s cybercrime news is a delightful cocktail of international crackdowns, exploited vulnerabilities, and the enduring power of hate speech on online platforms. In short, another day, another…

In today’s digital-first world, cybersecurity is no longer optional — it’s essential. Organizations across the globe are facing relentless…

bkcrack is a command-line tool which implements crack legacy zip encryption with Biham and Kocher's known plaintext attack.

Damn Vulnerable Azure Infrastructure is a vulnerable by design infrastructure on Azure featuring the OWASP Top 10 web app security risks

A new report uncovers Android.Backdoor.916.origin, a sophisticated trojan disguised as an antivirus app that targets employees of Russian businesses for data theft.

A new report uncovers the vast, resilient ecosystem behind Lumma Stealer, revealing how affiliates use a web of tools and services to diversify attacks and evade takedowns.

A new company in the UAE is shaking up the vulnerability market, offering up to $20M for zero-day smartphone exploits in a secretive and unprecedented move.

Microsoft has restricted Chinese companies' access to its MAPP vulnerability program after a SharePoint attack raised suspicions of leaked information and misuse.

A new report reveals that password-guessing attacks now succeed in 46% of cases, highlighting how weak passwords and legacy systems are the top threats to corporate networks.

A hacker's quest for free nuggets revealed dozens of critical vulnerabilities in McDonald's corporate systems, exposing major security flaws and a lack of bug bounty program.

A dangerous attack combines MITM6 and NTLM Relay to exploit default Windows and Active Directory settings, allowing attackers to seize full domain control.

A new report uncovers a malicious Go module disguised as a Solana tool. It's secretly an infostealer that targets crypto developers and sends data to a US-based server.

A popular Chrome VPN extension, FreeVPN.One, has been exposed as spyware that secretly captures user screenshots and logs visited websites.