Critical Fancy Product Designer plugin flaws risk remote code execution and SQL injection attacks on WordPress sites

Hidden dependencies and social engineering attacks can contribute to the insecure use of open-source software in 2025.

The attack used a stolen remote support SaaS API key to exfiltrate data from workstations in the Treasury Department's Office of Foreign Assets Control.

Since 2019, MirrorFace has been stealing information from myriad Japanese organizations to gain leverage over Japan in the event of hostilities between the two countries, experts said.

The most recent iteration of the open source infostealer skates by antivirus programs on Macs, using an encryption mechanism stolen from Apple's own antivirus product.

Trend Micro detailed how attackers are using a fake proof-of-concept for a critical Microsoft vulnerability, designed to steal sensitive data from security researchers

China-backed attacks on IoT systems helped keep numbers high

Cyber criminals are actively exploiting a critical RCE flaw affecting Ivanti Connect Secure appliances

An easily understood package that takes the pain out of securing your IT estate – and keeping it that way.

The US medical billing firm is notifying over 360,000 customers that their personal, financial and medical data may have been exposed

Learn how zero-day attacks exploit unknown vulnerabilities, and why cyber hygiene is critical for defense.

A large-scale cyber-attack has targeted the information system of Slovakia’s land registry, impacting the management of land and property records

To build a truly inclusive and diverse cybersecurity workforce, we need a comprehensive approach beyond recruitment and retention.