A flaw in the Cursor extension allows unauthorized code execution when opening repositories in Visual Studio

The vulnerability, dubbed SessionReaper, allows customer account takeover and unauthenticated remote code execution

Sophos found that average ransom demands and payments fell substantially in the education sector in 2025, as recovery time and costs fell

Microsoft has fixed over 80 vulnerabilities including two publicly disclosed zero-days in its latest Patch Tuesday release

Wiz Security warns that a recently discovered supply chain attack campaign targeting npm is far from over

Explore Torq alternatives in 2025. Compare 9 leading AI SOC vendors on strengths, blind spots, and pricing.

Compare Blumira with 6 leading AI SOC platforms in 2025. Explore strengths, blind spots, costs, and why human-led MDR still beats autonomous SOCs.

Learn exactly what to demand from a SOC vendor SLA—measurable KPIs, response targets, penalties, and reporting.

Discover real AI integration cyber attack incidents involving LLMs. Learn how attackers exploit these systems and how to design AI-powered features securely.

ASD’s ACSC confirms active exploitation of CVE-2024-40766 in SonicWall SSL VPNs. Urges urgent patching, MFA, and access controls for Aussie orgs.

A sophisticated fileless malware campaign has been observed using legitimate tools to deliver AsyncRAT executed in memory

The US cybersecurity agency called for the CVE program to remain publicly maintained and vendor-neutral while emphasizing the need for broader engagement

In May 2025, the European Union levied financial sanctions on the owners of Stark Industries Solutions Ltd., a bulletproof hosting provider that materialized two weeks before Russia invaded Ukraine and quickly became a top source of Kremlin-linked cyberattacks…

As bad actors often simply waltz through companies’ digital front doors with a key, here’s how to keep your own door firmly locked tight.

The FBI has detailed steps enterprises can take to prevent falling victim to Salesforce attacks