A high-severity security vulnerability in the WordPress plugin Modular DS is currently being exploited in the wild, according to cybersecurity firm Patchstack. The flaw, identified as...
A critical misconfiguration in AWS CodeBuild exposed several high-profile GitHub repositories to potential supply chain attacks, according to cloud security researchers at Wiz. The vulnerability, dubbed...
Cybersecurity threats are evolving faster than ever, with attackers leveraging both old and emerging technologies to exploit vulnerabilities across IT, OT, and cloud systems. This week’s...
Cybersecurity experts have uncovered a critical vulnerability in AI chatbots like Microsoft Copilot, revealing a new attack method called Reprompt that enables data exfiltration with just...
Cisco has released urgent security updates to address a critical vulnerability in its Secure Email Gateway and Secure Email and Web Manager products after confirming active...
A China-linked cyber espionage group has been observed exploiting a previously unknown vulnerability in Sitecore software to infiltrate critical infrastructure organizations across North America, according to...
Cybersecurity researchers have uncovered a targeted espionage campaign aimed at U.S. government and policy-focused organizations, using politically charged content tied to U.S.–Venezuela relations to deliver a...
Even people who are careful online—locking down social media accounts, avoiding suspicious calls, and using strong passwords—may still be exposing far more personal information than they...
CERT Polska, Poland’s computer emergency response team, has disclosed a series of coordinated cyberattacks targeting more than 30 wind and photovoltaic (PV) farms, a large combined...
Ivanti has released urgent security updates addressing two critical zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) platform, which have already been exploited in the wild....