news

Researchers have detailed a method to leverage vulnerable Windows kernel-mode drivers for malicious purposes, even when the specific hardware they are designed for is absent. This technique bypasses a common limitation,

A sophisticated automated campaign dubbed "Megalodon" has been observed injecting malicious code into thousands of GitHub repositories, targeting CI/CD workflows to steal sensitive information. This widespread compromise

A recent law enforcement action has led to the arrest of a Canadian national accused of operating the Kimwolf distributed denial-of-service (DDoS) botnet, a significant player in cybercrime-as-a-service offerings. The op

Two critical vulnerabilities, one impacting the Langflow development platform and another affecting Trend Micro's Apex One security solution, have been added to CISA's Known Exploited Vulnerabilities (KEV) catalog due to

A sophisticated Linux backdoor, identified as Showboat, has been actively targeting a Middle Eastern telecommunications provider since mid-2022, exhibiting capabilities for remote access, file manipulation, and network p

New threat intelligence reveals sophisticated intrusion campaigns leveraging AI agents and exploiting vulnerabilities in commonly used software, underscoring a shift towards attackers using existing infrastructure for ma