LockBit's developer charged for enabling global ransomware attacks netting $500M; U.S. leads extradition effort.

Lazarus Group's CookiePlus malware targets nuclear engineers, showcasing DPRK's evolving arsenal and $1.34B in 2024 crypto ...

The security vendor said CVE-2024-12727 impacts about 0.05% of devices, whereas CVE-2024-12728 affects approximately 0.5% of ...

CISA lists CVE-2024-12356, a critical BeyondTrust flaw, as actively exploited. Update on-prem systems to patch ...

The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a ...

Fortinet EMS flaw (CVE-2023-48788, CVSS 9.3) exploited globally, dropping remote access tools and stealing credentials.

CVE-2024-53677: Critical 9.5 CVSS Apache Struts flaw enables remote code execution; patch now in version 6.4.0.

Default passwords on Juniper SSR devices exploited by Mirai botnet malware for DDoS attacks. Update credentials and audit ...

Phishers exploit HubSpot Free Forms to target 20,000 European users, compromising Azure accounts and bypassing security ...

CISA's new directive mandates federal agencies secure cloud environments by 2025, introducing SCuBA tools for monitoring and ...

The Dutch Data Protection Authority (DPA) on Wednesday fined video on-demand streaming service Netflix €4.75 million ($4.93 ...

Fake npm packages @typescript_eslinter/eslint and types-node exploit typosquatting to drop trojans, risking software supply ...