CrowdStrike warned it had observed a phishing campaign impersonating the firm’s recruitment process to lure victims into downloading cryptominer

New year, same story. Despite Ivanti's commitment to secure-by-design principles, Chinese threat actors are exploiting its edge devices for the nth time.

Cybercriminals are luring victims into downloading the XMRig cryptomining malware via convincing emails, inviting them to schedule fake interviews using a malicious link.

Growing sales of the System for Operative Investigative Activities (SORM), a Russian wiretapping platform, in Central Asia and Latin American suggests increasing risks for Western businesses.

Three Russian men have been indicted on money laundering charges connected to cryptocurrency mixers

Telefonica has confirmed a breach of its internal ticketing system exposing more than 236,000 lines of customer data

A new WEF report highlighted growing disparities in the cyber capabilities of different types of organizations and regions

Critical Chrome and WordPress vulnerabilities flagged by CyberSecurity Malaysia – act now to secure systems.

Victims are drawn in with the promise of an interview for a junior developer role at CrowdStrike

Researchers at Check Point said FunkSec operators appear to use AI for malware development

While Bitwarden’s generous free version is a big advantage, I feel 1Password’s refined user experience makes it the better pick for most users and businesses.

All about Ivanti’s two critical exploited vulnerabilities—CVE-2025-0282 and CVE-2025-0283—affecting its Connect Secure, Policy Secure, and Neurons for ZTA Gateways.

Microsoft confirmed an outage of its multi-factor authentication system impacting access to Microsoft 365, causing login failures and service disruption

By focusing on vigilant security practices, responsible AI deployment, and alignment with global regulatory standards, the OSS community can make 2025 a transformative year for security.