Hackers exploit PHP flaw (CVE-2024-4577) to deploy Quasar RAT and XMRig miners, with Taiwan hit hardest. Update PHP now to ...

Leaked Black Basta chats reveal Russian aid in leader’s escape, AI-assisted fraud, and BRUTED credential attacks on firewalls ...

CISA warns of CVE-2025-30066, a GitHub supply chain attack exposing secrets via compromised actions logs. Update ...

Identity-based attacks are rising, but ITDR helps detect threats, prioritize risks, and stop breaches before they happen.

Google Cloud acquires Wiz for $32B in its biggest-ever deal, strengthening multicloud security and expanding AI-driven ...

CVE-2024-54085 in AMI MegaRAC BMC allows remote control, malware deployment, and server damage; patches released March 11, ...

Microsoft’s unpatched Windows flaw (ZDI-CAN-25373) has been exploited by 11 state-backed groups since 2017, enabling ...

Android apps with 60M+ downloads ran full-screen ads, stole credentials, and bypassed security in a large-scale ad fraud and ...

Unpatched Edimax IC-7100 flaw (CVE-2025-1316) exploited for Mirai botnet malware since May 2024, enabling DDoS attacks via ...

Microsoft warns of StilachiRAT, a stealthy remote access trojan that steals credentials, crypto wallets, and system data ...

Critical router breaches, stealthy PyPI malware, powerful new ransomware decryptors—this week's top cyber threats decoded ...

Apache Tomcat flaw CVE-2025-24813 is under active exploitation, enabling remote code execution via PUT requests.