Apple has backported a patch for CVE-2025-43300, an out-of-bounds write flaw in the ImageIO framework, extending protection to older devices that did not initially receive ...
By
Okta Threat Intelligence has identified a high-risk phishing platform named VoidProxy. The service targets Microsoft 365 and Google users to capture sensitive data, including login ...
By
On September 12, 2025, Samsung issued its latest Android security patch, which resolves a significant zero-day flaw that has been actively exploited in attacks on ...
By
A newly uncovered cyber-espionage campaign is attributed to a Chinese-linked Advanced Persistent Threat (APT) group. While the campaign strongly aligns with Chinese APT tactics and ...
By
Adobe has released a security update addressing a serious flaw in Adobe Commerce and Magento Open Source, known as SessionReaper (CVE-2025-54236). This vulnerability has a ...
By
If personal hygiene is about not smelling like a 3-day-old stale food in public, then cyber hygiene is about not leaving your digital life like ...
By
Silent Push, a cybersecurity intelligence firm, has uncovered 45 previously unreported domains linked with Salt Typhoon, with part of the infrastructure overlapping with UNC4841. Significantly, ...
By
Security researchers have uncovered a supply chain attack in the npm registry, involving four packages disguised as Flashbots MEV tools and cryptographic utilities. These packages ...
By
Researchers at Check Point have warned that cybercriminals are attempting to leverage HexStrike AI to automate attacks against recently disclosed Citrix NetScaler flaws, with underground ...
By
Researchers at Check Point reported that the threat actor known as Silver Fox, also referred to as SwimSnake or UTG-Q-1000, employed a Bring Your Own ...
By