Ransomware attackers continue to primarily target small and medium-sized manufacturing businesses in Japan.

Have I Been Pwned has analyzed the information made public by the hackers who recently targeted Allianz Life.

گزارش مشترک کسپرسکی و BI.ZONE نشان می‌دهد که گروه هکری Storm-2460 با بهره‌گیری از یک نقص وصله‌شده در ویندوز، حملات جدیدی را در عربستان سعودی و برزیل اجرا کرده است.

Blue Locker ransomware hit Pakistan Petroleum Ltd, breaching 1TB of critical data as NCERT warns 39 ministries of rising threats.

GenAI-created phishing campaigns misuse tools ranging from website builders to text generators in order to create more convincing and scalable attacks.

A new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks.

Microsoft has officially confirmed that its August 2025 security update, known as KB5063709, is causing failures in key reset and recovery features across multiple versions of Windows.

Kaspersky experts analyze GodRAT, a new Gh0st RAT-based tool attacking financial firms. It is likely a successor of the AwesomePuppet RAT connected to the Winnti group.

Bragg Gaming Group says hackers accessed its internal systems over the weekend, but did not affect its operations.

A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups: The vulnerability seemed to have super Windows powers. It abused alternate data streams, a Windows feature that allows different ways of representing the same file…

More and more car manufacturers these days are becoming interested in the recurring revenue model, with Volkswagen’s ID.3 BEV being the latest to have an optional ‘motor power upgrade&#…

The Business Council of New York State (BCNYS) has revealed that attackers who breached its network in February stole the personal, financial, and health information of over 47,000 individuals.

DripDropper is a Red Canary-named Linux malware variant that uses an encrypted PyInstaller ELF file to communicate with a Dropbox account.

The Indiana-based pharmaceutical company Inotiv discovered a cybersecurity incident earlier this month and found the hackers had encrypted certain systems.

An attacker is breaking into Linux systems via a widely abused 2-year-old vulnerability in Apache ActiveMQ, installing malware and then patching the flaw.

TPG Telecom has disclosed a cybersecurity incident after discovering unauthorized access to an iiNet order management system.

Microsoft has confirmed that the August 2025 Windows security updates are breaking reset and recovery operations on systems running Windows 10 and older versions of Windows 11.

A working exploit targeting critical SAP vulnerabilities CVE-2025-31324 and CVE-2025-42999 has been publicly released by the notorious cybercriminal group "Scattered LAPSUS$ Hunters – ShinyHunters" via Telegram channels, with VX Underground subsequently publishing…

By addressing these overlooked risk vectors, organizations can continue leveraging GitHub's innovation while protecting against sophisticated supply chain attacks targeting interconnected software.