Three Russian men have been indicted on money laundering charges connected to cryptocurrency mixers

Telefonica has confirmed a breach of its internal ticketing system exposing more than 236,000 lines of customer data

A new WEF report highlighted growing disparities in the cyber capabilities of different types of organizations and regions

Critical Chrome and WordPress vulnerabilities flagged by CyberSecurity Malaysia – act now to secure systems.

Victims are drawn in with the promise of an interview for a junior developer role at CrowdStrike

Researchers at Check Point said FunkSec operators appear to use AI for malware development

While Bitwarden’s generous free version is a big advantage, I feel 1Password’s refined user experience makes it the better pick for most users and businesses.

All about Ivanti’s two critical exploited vulnerabilities—CVE-2025-0282 and CVE-2025-0283—affecting its Connect Secure, Policy Secure, and Neurons for ZTA Gateways.

Microsoft confirmed an outage of its multi-factor authentication system impacting access to Microsoft 365, causing login failures and service disruption

By focusing on vigilant security practices, responsible AI deployment, and alignment with global regulatory standards, the OSS community can make 2025 a transformative year for security.

Threat actors are targeting people searching for pirated or cracked software with fake downloaders that include infostealing malware such as Lumma and Vidar.

The Hellcat ransomware group has stolen roughly 5,000 documents, potentially containing confidential information, from the telecom giant's internal database.

Cyber threat exposure management (CTEM) helps organizations identify, assess and mitigate new cyber risks in the face of ever-evolving challenges.

Diplomatic entities in Kazakhstan and Central Asia have been targeted by UAC-0063 using weaponized Word docs deploying HATVIBE malware

According to the tech giant, it has observed a threat group seeking out vulnerable customer accounts using generative AI, then creating tools to abuse these services.

The security vulnerability tracked as CVE-2024-50603, which rates 10 out of 10 on the CVSS scale, enables unauthenticated remote code execution on affected systems, which cyberattackers are using to plant malware.