A critical Insecure Direct Object Reference (IDOR) vulnerability chain in ZITADEL’s administration interface (CVE-2025-27507) has exposed organizations to systemic risks…
YouTube CEO Neal Mohan was impersonated in a deepfake phishing scam. Learn about the attack, how to spot the red…
Cyber threats are growing more sophisticated, and traditional security approaches struggle to keep up. Organizations can no longer rely on…
Elastic has issued an urgent security advisory for a critical vulnerability in Kibana, tracked as CVE-2025-25012, that allows authenticated attackers…
A critical security vulnerability in LibreOffice tracked as CVE-2025-1080, has exposed millions of users to potential remote code execution attacks…
Broadcom Urges VMware Customers to Address Zero-Day Vulnerabilities Broadcom, a leading American semiconductor company and now the owner of VMware,…
Mar 06, 2025Ravie LakshmananData Breach / Website Security Over 1,000 websites powered by WordPress have been infected with a third-party…
A new malware campaign named Phantom Goblin, identified and analyzed by Cyble, uses information-stealing malware that uses social engineering techniques…
A new ransomware group, SecP0, has emerged on the cybercrime landscape, adopting a novel and deeply concerning tactic: demanding ransom…
Google collects and stores significant amounts of user data on Android devices, even when users haven’t opened any Google apps….
Nine of the UK’s biggest banks accumulated over 33 days of IT downtime over the last two years with millions…
Chinese Lotus Blossom APT targets multiple sectors with Sagerunex backdoor Pierluigi Paganini March 06, 2025 China-linked Lotus Blossom APT targets…