Felons, Fraudsters Flog Offensive Cybersecurity Startup
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities is run by a pair of far-right conspiracy…
Security
Cybersecurity, vulnerabilities, threats, and defense
North Korean Hackers Use Fake Coding Tests With Malware Hidden in SVG Image Files
North Korean threat actors have been caught using steganography techniques to conceal malicious payloads inside SVG image files as part…
Chinese Cybercrime Group GoldenEyeDog Linked to DigiCert Breach and Certificate Theft
Cybersecurity researchers have linked the April 2026 security incident at certificate authority DigiCert to a Chinese cybercrime subgroup tracked as…
NadMesh Go Botnet Hunts Exposed AI Services for Cloud Credentials and Kubernetes Secrets
A newly discovered Go-based botnet called NadMesh is actively scanning the internet for exposed AI services, harvesting cloud credentials and…
Seven Malicious npm Packages Target Vite Ecosystem With Blockchain-Based Command-and-Control
Cybersecurity researchers have uncovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem in a software…
HollowByte Vulnerability Lets Attackers Cripple OpenSSL Servers With Tiny 11-Byte Payload
A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service condition on OpenSSL servers using a malicious payload of…
New Windows LegacyHive Zero-Day Exploit Grants Attackers Admin Privileges
A security researcher has released details of a Windows zero-day vulnerability dubbed LegacyHive that allows attackers to escalate privileges to…
Ernst & Young Discloses Data Breach After Third-Party Support System Compromised
Ernst & Young (EY) has disclosed a data breach affecting some of its customers after attackers compromised a third-party support…
Russian Threat Actor Targets WebEx and Zoom Users With Trojanized Installers
A financially motivated Russian threat actor tracked as UAT-11795 has been distributing trojanized versions of WebEx and Zoom installers to…
CISA Orders Federal Agencies to Patch Actively Exploited Fortinet FortiSandbox Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency has ordered federal civilian agencies to patch two actively exploited vulnerabilities in the…