A serious security flaw has been discovered in One Identity’s OneLogin platform. In earlier versions, 2025.3.0, the system accidentally exposed OIDC client secrets through its ...

The U.K. NCSC and Cisco warn that a state-linked campaign exploited recently disclosed Cisco firewall flaws in zero-day attacks to deploy two novel implants, RayInitiator ...

A new variant of the PlugX remote access trojan (RAT), also known as Korplug or SOGU, is being deployed in an ongoing cyber campaign against ...

Libraesva has rolled out an emergency security update for its Email Security Gateway (ESG) after confirming that a command injection vulnerability, tracked as CVE-2025-59689, was ...

Cybersecurity researchers at SentinelOne have come across a curious sample that may be the first malware to actually embed a Large Language Model (LLM). The ...

LastPass has warned of a widespread malware campaign in which attackers are abusing GitHub repositories to distribute Atomic Stealer (AMOS), an infostealer targeting Apple macOS ...

Jaguar Land Rover (JLR), Britain’s largest automotive manufacturer, has prolonged its production shutdown after suffering a major cyber incident on September 1. The company confirmed ...