Cybersecurity

Check Point warns of active exploitation of CVE-2026-50751, a critical VPN authentication bypass vulnerability.The flaw affects Remote Access VPN deployments using the deprecated IKEv1...

The China-nexus cyber espionage group VerdantBamboo deployed a BSD variant of the BRICKSTORM backdoor against Linux systems.The group compromised an Egnyte Storage Sync system...

OpenAI has launched a new optional Lockdown Mode for ChatGPT personal accounts to mitigate data theft risks from prompt injection attacks.The feature disables or...

A security researcher has reverse-engineered how a popular data firm turns consumer devices, including smart TVs, into web-scraping proxies.The SDK, embedded in free apps,...

Asin, a new Android spyware, specifically targets Arabic-speaking users by mimicking legitimate apps and news sources.The malware spreads through fraudulent websites and social media...

A new Chinese-linked threat cluster, OP-512, is deploying a sophisticated custom web shell framework on Microsoft IIS servers to conduct cyber espionage.The group uses...

A critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin is being actively exploited for remote code execution, compromising sites with about 4,000...

Cisco has patched a critical server-side request forgery vulnerability, CVE-2026-20230, in its Unified Communications Manager and Session Management Edition.The flaw allows an unauthenticated attacker...