Cyber threats and incidents

Critical Command Injection Flaw in Spring CLI VSCode Extension Risks Local System Compromise

What happened A critical command injection flaw in the Spring CLI VSCode...

Elastic Security Updates Address Arbitrary File Access and Denial-of-Service Flaws

What happened Elastic security updates address arbitrary file access and denial-of-service flaws...

Widespread Web Skimming Campaign Hijacks Checkout Pages to Steal Credit Cards

What happened A widespread web skimming campaign hijacks checkout pages to steal...

Multi-Stage Windows Malware Uses PowerShell and Text Files to Deliver Payloads

A multi-stage Windows malware uses text-based payloads to invoke a PowerShell...

Android Banking Malware Uses Fake Automotive Sites to Steal Credentials and Lock Devices

What happened The Android Banking Malware deVixor actively targets users with ransomware...

Popular

Daylight Security’s Viral Videos Reimagine The Black Hat Experience For CISOs

For all the attention cybersecurity conferences receive, the experience...

Fig Extends Platform Coverage to the Entire SecOps Engineering Lifecycle, Setting Resilience as the Default

The modern security operations center is built on a...

Microsoft’s Largest Patch Tuesday Ever Raises New Challenges for Security Teams

What happened Microsoft released its July 2026 Patch Tuesday update,...

ClickFix Evolves Into a Malware Ecosystem, Challenging Traditional Security Defenses

What happened ClickFix has grown from a simple social engineering...

Weak Router Security Continues to Fuel Russian Cyber Operations Against Critical Infrastructure

What happened US cybersecurity agencies, together with counterparts from more...