Cybersecurity

Attackers are exploiting a critical vulnerability in MikroTik RouterOS that grants full administrative control via SSH without authentication.Successful attacks have been observed since at...

JetBrains urges Cadence users to immediately revoke and rotate all credentials after attackers exploited a critical TeamCity vulnerability (CVE-2026-63077) to breach its environment.The intrusion...

Microsoft has identified a high-volume phishing campaign using invisible Unicode tag characters to bypass email security filters.Dubbed "ASCII Smuggling," the technique conceals financial lure...

Google patched 12 Chrome vulnerabilities on September 4, 2026, including one actively exploited zero-day.The high-severity flaw, CVE-2026-85046, is a type confusion bug in the...

Threat actors are abusing the trusted, signed Node.js runtime to deploy malicious payloads, evading signature-based detection.Campaigns since February 2026 have targeted government departments, technology...

Cybersecurity firm ThreatFabric uncovered a new Android banking trojan called StreamRat, spread via fake TV-streaming ads on Meta that reached nearly 571,000 EU accounts.The...

Two critical vulnerabilities in GeoNetwork can be chained for unauthenticated remote code execution (RCE), affecting many government geoportals.The flaws exist in versions up to...

Researchers discovered 13 malicious Composer theme packages on Packagist targeting Vietnamese streaming sites with JavaScript injection.The attack deploys ad-fraud and, on unpatched iPhones, a...