Docker has disclosed a critical Docker Hub vulnerability that could let attackers impersonate other users and publish container images under trusted…
Category: Cyber Security News
TFG London Cyberattack Disrupts IT Systems Used by Phase Eight, Hobbs, and Whistles Brands
TFG London has confirmed a cyberattack that disrupted IT systems supporting Phase Eight, Hobbs, and Whistles. South Africa’s The Foschini Group detected…
CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure
CrowdStrike has joined Anthropic’s Critical Infrastructure Defense Program to help strengthen AI-powered cybersecurity across energy, water,…
ICMacOS Malware Evolves to Steal Credentials and Provide Persistent Remote Mac Access
ICMacOS malware has grown from a tool that steals passwords and cryptocurrency wallet data into a remote access trojan that can keep attackers connected…
Threat Intelligence Guide for US SOC Teams and CISOs: How to Choose the Right Solution
Choosing an enterprise threat intelligence solution is about more than just data volume or integrations. The right provider should deliver relevant…
Danfoss Refrigeration Hack Update – 4,980 Hosts Found Exposed to Internet
France accounts for more than half of the internet-facing hosts found in a Shodan search for Danfoss web pages, following a cyberattack that disrupted…
Ivanti Connect Secure 0-Day Vulnerability Actively Exploited in the Wild
Ivanti has disclosed an actively exploited zero-day vulnerability in Ivanti Connect Secure (ICS) that allows remote attackers to execute arbitrary…
CISA Warns of Hackers Exploiting Two Citrix NetScaler 0-Days to Execute Code Remotely
Threat actors are actively exploiting two critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances, allowing them to…
Zoom Clients for Certificate Validation Flaw Exposes Sensitive Information via Network Access
Two high-severity certificate validation flaws in Zoom clients could allow attackers without login credentials to access sensitive information over a…
Anthropic Warns AI Models Could Soon Self-Replicate on Smart TVs and IoT Devices Without a Data Center
Anthropic warns that small AI models may be months away from self-replicating across poorly secured smart TVs and other internet-connected devices. Its…
Critical Ghostscript Flaw Lets Attackers Use Malicious PDFs to Execute Code
A critical vulnerability in Ghostscript could allow attackers to use specially made PDF files to run code on vulnerable servers. The flaw, tracked as…
Fake Web3 Accelerator Uses Malicious npm Packages to Target Crypto Founders
A fake Web3 accelerator called Apex has been using malicious npm packages to target cryptocurrency start-ups and founders with what appeared to be free AI…
SAP Security Update Patches Critical Code Injection and Memory Corruption Vulnerabilities
SAP has released its October 2026 security updates, fixing critical code injection, access control, and cloud security flaws alongside a high-severity…
XWorm Malware Can Spy Through Your Microphone and Hijack Logged-In Browser Sessions
XWorm malware is moving beyond password theft, giving attackers tools to listen through infected computers, track their location, and control browsers…
Kimsuky Hackers Use Malicious Resume Documents to Deploy Funhouse Ransomware
Kimsuky hackers have used a malicious résumé document to deploy Funhouse ransomware through a chain of scripts and remote access tools. The attack begins…
Top 10 Best RASP Tools in 2026 [Ranked & Scored]
RASP’s idea block attacks from inside the running app won so convincingly that observability and edge platforms absorbed it, leaving a thinner standalone…
Meta Zurp AI Toolkit Connects Burp Suite With AI Coding Agents for Bug Bounty Research
Meta has introduced Zurp, an open-source toolkit that connects Burp Suite workflows with AI coding agents for approved bug bounty research. The project is…
Hackers Exploit Citrix NetScaler 0-Days to Deploy Platypus Remote Access Tool
Threat actors are exploiting two critical Citrix NetScaler zero-day vulnerabilities to deploy a modified Platypus remote access tool on exposed ADC and…
Top 10 Best CI/CD Pipeline Security Tools in 2026 [Ranked & Scored]
Supply-chain attackers stopped bothering with your code they poison the pipelines that build it. Modern build pipelines execute untrusted third-party code…
Top 10 Best Mobile Application Security Testing Tools in 2026 [Ranked & Scored]
Mobile security is two budgets wearing one name: testing finds the flaws before release, shielding hardens the binary against the hostile devices it ships…