Imagine walking into a store that looks stunning spotless floors, perfect lighting, and displays that practically beg to be posted on…

It’s true, Chrome was vulnerable to RCE, but the update closes the door

Salesloft has restored its Salesforce integration after a breach compromised OAuth tokens. The company details how attackers gained access and exfiltrated data.

GreyNoise reports a massive surge in scanning activity targeting Cisco ASA devices from a Brazilian botnet, which often precedes new vulnerability disclosures.

A new report details a new trojan, MostereRAT, that uses legitimate remote access tools like AnyDesk and TightVNC to maintain covert control.

A new report reveals that the Chinese cyber-espionage group Salt Typhoon has been active for years, with infrastructure dating back to 2019.

A new supply chain attack, GPUGate, is using Google Ads and fake GitHub repositories to deliver malware that only decrypts on systems with a GPU.

A new Pwnie-winning exploit (CVE-2024-50264) demonstrates a sophisticated method for privilege escalation in the Linux kernel, bypassing modern security defenses.

A phishing attack compromised a maintainer, leading to malicious code being injected into 18 popular npm packages with over 2 billion weekly downloads.

A new report reveals two sophisticated AI-driven influence networks—Hidden Charkha and Khyber Defender—that spread pro-India and pro-Pakistan propaganda.

A new HTTP/2 flaw, MadeYouReset, forces servers to reset streams, which can lead to a denial-of-service attack. Microsoft Azure is already protected.

Anthropic is expanding its regional restrictions to block foreign subsidiaries of companies based in sanctioned countries to prevent potential AI misuse.

A critical vulnerability in Apache Jackrabbit (CVE-2025-58782) exposes enterprise systems to JNDI injection and remote code execution. Update now.

A new ransomware strain, Cephalus, is attacking companies by using a legitimate SentinelOne binary to execute its payload, disable defenses, and encrypt files.

A new study reveals that ransomware gangs have an average lifespan of just 1.36 years, yet they inflict massive damage through the RaaS model.

A new report reveals attackers are using fake ConnectWise ScreenConnect installers to deliver a complex chain of remote access trojans and other malware.

Hello folks,

Assalam o alaikum for muslim brothers, sisters and hello for non muslims, i hope all of you are doing well and learning new things day by…

my first password reset poisoning to acount takeover

Hyper link injection in email to open redirect