Malware
Bogus WordPress Security Plugin Grants Hackers Admin Control
A malicious campaign is exploiting WordPress users by disguising malware as a legitimate security plugin, researchers warn. This fake plugi…
Latest
Cybersecurity News · Page 9
Breaking threats, breaches and vulnerabilities — explained.
Enterprise Security
Zero-Day Exploits Still a Major Threat Google Spots 75 in the Wild This Year
Google's security researchers have uncovered 75 zero-day vulnerabilities actively exploited by attackers so far in 2024. While this represe…
Threat Intelligence
SentinelOne Says Chinese Hackers Targeted Its Systems and Clients
A China-linked hacking group known as PurpleHaze attempted to infiltrate SentinelOne's infrastructure and the networks of some of its most…
Vulnerability
AI Systems Riddled with Security Holes, Data Theft a Real Threat
Popular AI platforms are facing serious security questions after researchers discovered they are susceptible to jailbreak attacks. These fl…
artificial intelligence
WhatsApp Taps AI with New Privacy-Focused Tech
WhatsApp is betting on a new strategy to bring artificial intelligence features to its users without compromising the privacy of their mess…
Malware
ToyMaker Broker Peddles Network Access to CACTUS Ransomware Group
A cybercrime middleman known as ToyMaker is selling access to compromised networks, reportedly funneling victims directly into the clutches…
Vulnerability
Ruby Servers at Risk From Rack::Static Flaws, Experts Warn
Security researchers have uncovered a trio of vulnerabilities in Rack, a popular Ruby web server interface, that could expose sensitive dat…
Vulnerability
SAP NetWeaver Under Attack Critical Flaw Lets Hackers Plant Web Shells
A serious security hole in SAP NetWeaver is being actively exploited, allowing attackers to inject malicious web shells and potentially gai…
Cryptocurrency
North Korean Hackers Use Crypto Job Scams to Deploy Malware
A North Korean hacking group is disguising itself as legitimate cryptocurrency firms to lure unsuspecting job seekers into downloading malw…
Phishing
Darcula Phishing Service Now Weaponized with AI
The Darcula phishing-as-a-service platform just got a whole lot more dangerous. Cybercriminals using the service now have access to generat…
Endpoint Security
Stealth Linux Rootkit Exploits io_uring to Evade Detection
A novel rootkit, dubbed Curing, is demonstrating how attackers can use Linux's advanced io_uring asynchronous I/O system to slip past conve…
Malware
North Korean Lazarus Group Targets South Korean Companies Exploiting Software Vulnerabilities
The notorious North Korean hacking group Lazarus is suspected of breaching at least six South Korean organizations in a campaign security r…