On December 13, 2025, the Roundcube Project announced the release of urgent security updates for its widely used open-source webmail platform. Versions 1.6.12 and 1.5.12 (the Long-Term Support...
The UK government has confirmed that it was the target of a cyber attack in October, following a statement by a senior minister acknowledging unauthorized access to government systems. The disclosure...
A supply chain compromise involving ASUS Live Update has resurfaced as a major cybersecurity concern following updated findings tied to CVE-2025-59374. The vulnerability has drawn renewed attention...
A critical security flaw in HPE OneView has placed enterprise infrastructure environments at significant risk, after researchers confirmed that the vulnerability allows unauthenticated remote code...
Kirloskar Oil Engines, one of India’s most established industrial manufacturing companies, disclosed a cybersecurity breach in December 2025 that disrupted parts of its digital infrastructure. The...
A newly identified Android botnet known as Kimwolf has compromised more than 1.8 million devices worldwide, according to research published by Chinese cybersecurity firm XLab. The botnet has been...
DXS International, a technology services and managed IT provider operating across the Asia Pacific region, has confirmed a cybersecurity breach that has exposed sensitive internal and client related...
In a significant development in the realm of cybersecurity, French authorities have apprehended a young suspect linked to a recent breach of the Interior Ministry's systems. This incident, which...
The University of Sydney has confirmed a data breach that resulted in unauthorized access to sensitive personal information belonging to students, staff, and affiliates. The incident has prompted an...
The United Kingdom’s flagship digital identity programme, UK One Login, has come under intense scrutiny following warnings from a whistleblower who claims the system contains severe security...
:max_bytes(150000):strip_icc()/GettyImages-1601469961-b6dbc6d7e5dd4b85aca15489d3c1d691.jpg)
In a stark reminder of the persistent threats facing network security infrastructure, Cisco Systems disclosed a critical zero-day vulnerability in its AsyncOS software on December 17, 2025. Tracked...
Apple and Google have issued a new round of cyberthreat notifications, alerting users across multiple countries to what they describe as an unprecedented surge in activity by state-linked mercenary...
A critical zero-day vulnerability affecting Cisco SSL VPN services is being actively exploited by threat actors, placing organizations worldwide at heightened risk of unauthorized access and network...
Threat actors are actively exploiting a zero-day vulnerability affecting SonicWall SMA 1000 series appliances, raising serious concerns for organizations that rely on the platform for secure remote...
A newly disclosed privilege escalation vulnerability affecting Windows Admin Center has raised concerns among enterprise security teams, as the tool is widely used to manage Windows Server...
Threat actors are actively exploiting two critical authentication bypass vulnerabilities in Fortinet FortiGate appliances, placing enterprise and government networks at significant risk. The flaws,...
An extortion campaign has emerged targeting PornHub, one of the largest adult entertainment platforms in the world. The group claiming responsibility — known in cybersecurity circles as ShinyHunters...
France’s Ministry of the Interior has confirmed that it is responding to a cybersecurity incident after signs of unauthorized access were detected within parts of its digital infrastructure. The...
Apple has released a new set of security updates to address two zero-day vulnerabilities that were being exploited in the wild and are tied to a recently disclosed flaw also patched in Google Chrome....
Venezuela’s state-owned oil giant Petróleos de Venezuela S.A. (PDVSA) has confirmed that it was recently affected by a cyberattack, raising renewed concerns about the cybersecurity resilience of...