Anime streaming platform Crunchyroll is investigating a potential data breach after a threat actor claimed to have stolen personal information tied to roughly 6.8 million users, raising fresh...
Bug bounty platform HackerOne is notifying employees that their personal information was exposed following a breach at Navia, one of its U.S. benefits administrators, in an incident that highlights...
Ameriprise Financial has become the focus of a fresh cybersecurity claim issued by the notorious hacking collective ShinyHunters. The group publicly stated on underground leak forums that it had...
A North Korean-linked threat actor known as WaterPlum, also referred to as Contagious Interview, has been identified targeting developers through a sophisticated malware campaign leveraging Visual...
Mazda Motor Corporation has disclosed a cybersecurity incident involving unauthorized access to a warehouse management system used for handling automotive parts procured from Thailand. The breach...
The phishing-as-a-service platform Tycoon2FA has rapidly resumed operations just days after a coordinated international takedown led by Europol and Microsoft. Despite the seizure of hundreds of...
Voice phishing is rapidly overtaking traditional email phishing as one of the most effective initial access techniques used by attackers, according to Mandiant's newly released M-Trends 2026...
Cybersecurity researchers have uncovered a widening supply-chain attack centered on Trivy, the widely used open-source vulnerability scanner, after threat actors pushed trojanized container images to...
Microsoft has warned of fresh tax-season phishing campaigns that are impersonating the Internal Revenue Service (IRS), accountants, and tax professionals to steal credentials, capture two-factor...
A major cyberattack attributed to the WorldLeaks ransomware group has impacted the City of Los Angeles and its public transportation network, causing widespread service disruptions and raising...
In a striking case highlighting the intersection of cybercrime and insider threats, three American men have been sentenced for assisting North Korean operatives in securing remote IT jobs at U.S....
U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five newly confirmed, actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, raising the...
The Quest KACE Systems Management Appliance remains one of the most widely deployed on-premises endpoint management platforms in education districts, municipal governments, and mid-market...
The OWASP Top 10:2025 is now the latest official OWASP list of the most critical web application security risks, and while the familiar themes remain, the ranking tells a very modern story....
The next major shift in security operations will not come from adding another dashboard, another detection feed, or another analyst console. It will come from changing the operating model of the SOC...
Let’s say the uncomfortable part out loud: the traditional Tier 1 SOC analyst role, at least as it has existed for years, deserves to die. Not because entry-level analysts are unimportant. Not...
The attackers primarily abuse Unicode variation selectors from two specific ranges: U+FE00 to U+FE0F (Variation Selectors) and U+E0100 to U+E01EF (Variation Selectors Supplement). These code points...
Cybersecurity researchers at CYFIRMA have identified a targeted phishing campaign that leverages invoice-themed lures to exploit organizations during fiscal year-end financial activities. The...
Google has unveiled a new security feature called “Advanced Flow” aimed at improving the safety of APK sideloading on Android devices. The update is designed to protect users from malicious...
Cybersecurity researchers have identified a new phishing technique in which attackers are abusing legitimate alerting features within Microsoft Azure Monitor to launch convincing callback phishing...