Sophisticated Android malware variant exploits ZIP-level manipulation and dynamic code loading to evade detection while conducting ad fraud operations targeting mobile users globally.

A new variant of the Konfety Android malware emerged with a malformed ZIP structure along with other obfuscation methods that allow it to evade analysis and detection.

In recent years, there has been an increase interest in the JavaScript engine vulnerabilities in order to compromise web browsers. Notably, vulnerabilities in JIT engines are among the most favorite ones as it provides strong primitives and well-known techniques…

Fake CNN, BBC, and ABC sites used in global scam campaign pushing “passive income” via Google & Facebook ads with celebrity bait tactics.

Albemarle County, Virginia, discovered irregularities in its IT infrastructure under a sophisticated ransomware attack.

A new Konfety Android malware variant uses a malformed ZIP and obfuscation to evade detection, posing as fake apps with no real functionality.

The CVSS base metrics from version 1.0 through 4.0. How to read CVSS scores, and why you shouldn't stop at the Base Score

UK's NCSC urges urgent Windows 11 upgrade as Windows 10 hits end-of-life on Oct 14, 2025—citing major security risks like WannaCry.

Apache Tomcat vulnerability lets attackers exhaust threads via HTTP/2, causing DoS without affecting data confidentiality or integrity.

North Korean hackers target crypto startups via fake Zoom interviews, using evolved malware and job lures.

Ransomware gangs now target Linux & VMware, shifting from Windows to exploit cloud & virtualization gaps in enterprise security defenses.

Google has released an emergency security update for Chrome, addressing a critical zero-day vulnerability that attackers are actively exploiting in real-world attacks.

Hacktivists now target critical infrastructure via ICS attacks, which rose to 31% in Q2 2025, marking a sharp shift from DDoS.

Over 17,000 fake news sites in 50 countries use ads, fake headlines, and public figures to push crypto scams in a global BaitTrap campaign.

North Korean hackers planted 67 malicious npm packages with 17K+ downloads, using new XORIndex malware in an evolving supply chain attack.

Octalyn Stealer on GitHub poses as a forensic tool, stealing VPN, browser, and crypto data via stealthy C++/Delphi malware builder.

Multiple severe vulnerabilities have been addressed affecting VMware ESXi, Workstation, Fusion, and Tools that could allow attackers to execute malicious code on host systems. 

Here’s how NCSC vulnerability research and the VRI strengthen UK cybersecurity through collaboration with experts, and the UK government.

An international law enforcement action dismantled a Romanian ransomware gang known as 'Diskstation,' which encrypted the systems of several companies in the Lombardy region, paralyzing their businesses.

North Korean threat actors planted 67 malicious packages in the Node Package Manager (npm) online repository to deliver a new malware loader called XORIndex to developer systems.

Microsoft has rolled out the Patch Tuesday updates for July 2025, ensuring the updates. This month’s update bundle is rather huge, addressing 137 different vulnerabilities across different products. Users with eligible devices should ensure keeping