On what was supposed to be a day full of lights, AWS decided to celebrate Diwali its own way, by turning off the lights across ...

Google Threat Intelligence observed UNC5342 (aka CL-STA-0240/ DeceptiveDevelopment/ Famous Chollima/ Void Dokkaebi, among others) using EtherHiding, embedding encrypted payloads in smart contracts on decentralised networks ...

Oracle’s E-Business Suite has come under attack due to two serious security flaws, CVE-2025-61882 (exploited in live attacks, lets hackers execute code remotely) and CVE-2025-61884 ...

Huntress has raised an alert over a wave of unauthorized logins targeting SonicWall SSL VPN devices, saying more than 100 VPN accounts across 16 customer ...

Discord has revealed that a recent security incident at one of its third-party support providers exposed personal details for a small group of users. The ...

Perplexity’s Comet browser can be turned into a silent data thief with a single click, researchers say. Security team LayerX today published a proof-of-concept they ...

A serious security flaw has been discovered in One Identity’s OneLogin platform. In earlier versions, 2025.3.0, the system accidentally exposed OIDC client secrets through its ...

The U.K. NCSC and Cisco warn that a state-linked campaign exploited recently disclosed Cisco firewall flaws in zero-day attacks to deploy two novel implants, RayInitiator ...

A new variant of the PlugX remote access trojan (RAT), also known as Korplug or SOGU, is being deployed in an ongoing cyber campaign against ...