HexStrike AI, according to its website, is pitched as an AI‑driven security platform to automate reconnaissance and ...

Iranian group used 104 hijacked accounts in embassy spear-phishing, exploiting geopolitical tensions for espionage.

DeepSeek’s January 2025 database leak exposed 1M+ logs via misconfigured ClickHouse, risking chat histories and keys.

Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a high-severity security flaw impacting ...

Salesloft on Tuesday announced that it's taking Drift temporarily offline "in the very near future," as multiple companies ...

Cloudflare mitigated a record 11.5 Tbps DDoS attack in 35 seconds, highlighting rising hyper-volumetric threats.

MystRodX backdoor, active since Jan 2024, uses encrypted payloads and DNS/ICMP triggers for stealthy C2 control.

Fox-IT said ThemeForestRAT shares similarities with a malware codenamed RomeoGolf that was put to use by the Lazarus Group in ...

The package, named nodejs-smtp, impersonates the legitimate email library nodemailer with an identical tagline, page styling, ...

FDN3 brute-force attacks peaked July 6–8, 2025, tied to Seychelles bulletproof hosts enabling ransomware entry.

Silver Fox exploited a Microsoft-signed WatchDog driver in May 2025 to bypass defenses, deploy ValleyRAT, and enable fraud.