news

Developers face a dual threat as sophisticated supply chain attacks leverage poisoned npm packages to deploy information stealers and self-propagating worms, targeting sensitive credentials and project integrity. Publish

A newly disclosed vulnerability in Cisco's Unified Communications Manager (Unified CM) allows unauthenticated network attackers to gain root access, with proof-of-concept exploit code now publicly available. Published: 2

A newly identified security flaw in Windows' search URI handler allows attackers to steal sensitive NTLMv2 hashes, potentially leading to network compromise, even though Microsoft has deemed it not severe enough for imme

A password manager has confirmed that a small number of encrypted user vaults were downloaded following a sophisticated brute-force attack targeting account credentials and two-factor authentication mechanisms. Published

A sophisticated spear-phishing campaign, attributed to a Pakistan-aligned threat actor, has targeted Afghanistan's Ministry of Finance, deploying the open-source Xeno RAT to exfiltrate sensitive data. Published: 2026-06-

Leading organizations are transforming their Endpoint Detection and Response (EDR) investments from mere visibility tools into robust operational resilience strategies, addressing the growing challenges posed by sophisti