Cybersecurity

Credential theft campaign FortiBleed is now linked to INC and Lynx ransomware operations, with stolen data used for follow-on attacks.Threat actors targeted ~11,250 FortiGate...

The U.S. CISA has flagged a high-severity Microsoft SharePoint flaw, CVE-2026-45659, as actively exploited, demanding federal agency patches by July 4, 2026.This remote code...

An unpatched flaw in Argo CD's repo-server component allows for unauthenticated remote code execution and potential full Kubernetes cluster takeover.Disclosed by Synacktiv after 18...

A Brazilian banking trojan named Ousaban is actively targeting Windows users in Spain and Portugal.The attack uses a phishing PDF disguised as a corrupted...

Microsoft accelerates its quantum-safe roadmap, targeting 2029 for migrating key services to post-quantum cryptography (PQC).New research demonstrates quantum attacks are feasible with far fewer...

A massive, automated password spray attack originating from LSHIY LLC made over 81 million login attempts against Microsoft's Azure CLI between June 12 and...

A new botnet called RustDuck is hijacking home routers and servers to launch DDoS attacks, rapidly evolving with a switch to the Rust programming...

A decades-old shell scripting trick, named GuardFall, can bypass the safety checks of most AI coding agents, exposing systems to severe risks.Researchers from Adversa...