How Attackers Bypass Synced Passkeys
Oct 15, 2025Ravie LakshmananData Protection / Browser Security TLDR Even if you take nothing else away from this piece, if your organization is evaluating passkey…
Latest Cybersecurity News — Page 1531
View all →
Calls for more government support and faster investment if UK to lead in quantum computing
The UK risks squandering its potential to become a leader in the field of quantum computing without more support from the government to build sovereign…
TigerJack Hacks Infiltrated Developer Marketplaces with 11 Malicious VS Code Extensions
A sophisticated threat actor known as TigerJack has systematically infiltrated developer marketplaces with at least 11 malicious Visual Studio Code extensions, targeting thousands of unsuspecting…
Chrome Use-After-Free Flaw Lets Attackers Execute Arbitrary Code
Google has released a critical security update for Chrome browser users after discovering a dangerous use-after-free vulnerability that could allow cybercriminals to execute malicious code…
Fake Google Job Offer Email Scam Targets Workspace and Microsoft 365 Users
A new report from the leading cybersecurity firm Sublime Security has revealed an ongoing email scam that uses fake job offers from Google to trick…
Pro-Russian Hacktivist Group Attacking Government Portals, Financial Services and Online Commerce
A sophisticated campaign orchestrated by multiple hacktivist groups has emerged, targeting government portals, financial services, and online commerce platforms across Israel and allied nations. The…
Microsoft IIS Exploit Allows Unauthenticated Attackers to Run Arbitrary Code
A serious security flaw has been discovered in Microsoft’s Internet Information Services (IIS) that lets attackers run arbitrary code without logging in. The vulnerability affects…
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
Microsoft on Tuesday released fixes for a whopping 183 security flaws spanning its products, including three vulnerabilities that have come under active exploitation in the…
Critical Veeam Backup RCE Flaws Allow Remote Execution of Malicious Code
Veeam has released an urgent security patch to address multiple critical remote code execution (RCE) vulnerabilities in Veeam Backup & Replication version 12. These flaws…
Microsoft patches three zero-days actively exploited by attackers
On October 2025 Patch Tuesday, Microsoft released fixes for 175+ vulnerabilities, including three zero-days under active attack: CVE-2025-24990, CVE-2025-59230, and CVE-2025-47827. The actively exploited vulnerabilities…
Dreamforce 2025: Benioff vaunts Slack as interface to agentic enterprise
Marc Benioff, chairman and CEO of Salesforce, told attendees of the software supplier’s Dreamforce conference in San Francisco that enterprise artificial intelligence (AI) will need…
SAP fixed maximum-severity bug in NetWeaver
SAP fixed maximum-severity bug in NetWeaver Pierluigi Paganini October 15, 2025 SAP addressed 13 new flaws, including a maximum severity vulnerability in SAP NetWeaver, which could…