Since December 2025, a concerning trend has emerged across Japanese organizations as attackers exploit a critical vulnerability in React/Next.js applications. The vulnerability, tracked as CVE-2025-55182…
A Google Chrome extension with a “Featured” badge and six million users has been observed silently gathering every prompt entered by users into artificial intelligence…
A new malware campaign called PCPcat has successfully compromised more than 59,000 servers in under 48 hours through targeted exploitation of critical vulnerabilities in Next.js…
Hybrid infrastructure that includes a mix of public/private cloud environments, on-premises workloads and air-gapped systems are preferred by security leaders as a way to boost…
The xHunt advanced persistent threat group has firmly established itself as a sophisticated cyber-espionage actor, orchestrating targeted campaigns against organizations in Kuwait. Since its emergence…
Mortgage brokers are being spurred by the finance watchdog to use technology, including artificial intelligence (AI), to improve services to customers. As part of its…
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Corporate executives see cybersecurity as…
700Credit, a U.S.-based financial services and fintech company, will start notifying more than 5.8 million people that their personal information has been exposed in a…
The JumpCloud Remote Assist vulnerability (CVE-2025-34352) exposes Windows systems to local privilege escalation and denial-of-service attacks. Discovered by XM Cyber researcher Hillel Pinto, the flaw…
A GitHub repository posing as a vulnerability scanner for CVE-2025-55182, also referred to as “React2Shell,” was exposed as malicious after spreading malware. The project, named…
We are staring down the barrel of 2026. If you think the last 12 months were chaotic, strap in. The business-as-usual model for security is…
Atlassian fixed maximum severity flaw CVE-2025-66516 in Apache Tika Pierluigi Paganini December 15, 2025 Atlassian released security updates to address dozens of flaws, including multiple…
