A malicious npm package impersonates the popular nodemailer library to inject code into crypto wallets on developers' PCs and steal funds from outgoing transactions.

A new CNA report reveals how private Russian cybersecurity firms, including Kaspersky and Positive Technologies, are deeply entwined with the Kremlin's cyber operations.

A critical flaw in NeuVector (CVE-2025-8077) allows attackers to bypass authentication with a hardcoded password, exposing Kubernetes clusters to full compromise.

North Korean IT workers are using deepfakes and fake identities to secure remote jobs, funding their regime’s weapons programs while posing a major security threat.

A new report reveals a rise in phishing campaigns that abuse email marketing platforms and cloud services to evade detection and steal credentials from victims.

A high-severity DoS flaw (CVE-2024-58259) in Rancher Manager allows attackers to crash servers by sending oversized API requests. Admins are urged to patch immediately.

A new report reveals the TAOTH cyber-espionage campaign, which hijacks software updates and uses spear-phishing to deliver malware to high-value targets in Asia.

SikkahBot, a new Android malware, is impersonating scholarship apps to steal financial data and automate transactions from students in Bangladesh.

A loophole in the VS Code Marketplace allows attackers to reuse names of removed extensions to spread malware, a flaw that creates a new supply chain attack vector.

A new report reveals the Silver Fox APT group is abusing a Microsoft-signed vulnerable driver to disable endpoint security and deploy the ValleyRAT backdoor.

A critical RCE flaw (CVE-2024-13986) in Nagios XI allows an authenticated attacker to upload and execute a malicious PHP shell, taking control of the server.

Ransomware has evolved.  In the early days, attackers focused on encrypting files on endpoints. Then, they moved to corporate networks…

TL;DR: Anthropic says it caught real criminals trying to use its AI, Claude, to polish phishing, fix/obfuscate code, and slip past…

Author: SafeLine Pro user — YaneonY

When using Nextcloud, some backup processes may encounter issues where certain program files are blocked by the WAF. This can interfere…

Introduction: The Coming Drone World

At some point in every cybersecurity journey, you reach a stage where you want to formalize your skills with a certification. For me, that…

Cyber warfare rarely stands still. Each campaign brings subtle evolutions, and every evolution signals how threat actors are refining their…

The Illusion of Choice

According to nmap.org, Nmap sends raw IP packets to figure out:

In today’s cybersecurity landscape, one credential stands tall as the gold standard for professionals aiming to establish credibility…