1916
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply…
Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent, the kind…
adminSwati KhandelwalNov 04, 2026Vulnerability / Cloud Security Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on…
Swati KhandelwalNov 04, 2026Vulnerability / Web Security A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app’s server by uploading a…
Swati KhandelwalNov 04, 2026Vulnerability / Mobile Security A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its…
Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as Fluffy Wolf, the threat actor has a history…
Ravie LakshmananNov 04, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog,…
adminRavie LakshmananNov 03, 2026Vulnerability / Network Security Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and…
adminRavie LakshmananNov 03, 2026Data Breach / Cyber Attack Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain…
Swati KhandelwalNov 03, 2026Password Security / Incident Response Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly…
