ToyMaker deploys LAGTOY malware to steal credentials and sell access to CACTUS ransomware groups for double extortion.

Darcula was first documented by the cybersecurity company in March 2024 as a toolkit that leveraged Apple iMessage and RCS to send smishing messages to users that trick recipients into clicking on ...

"In 2023, UNC3782 conducted phishing operations against TRON users and transferred more than $137 million USD worth of assets in a single day," the company noted. "UNC3782 launched a campaign in 2024 ...

"SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing an unauthenticated ...

Non-Human Identities, for the most part, authenticate using secrets: API keys, tokens, certificates, and other credentials ...

Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully ...

xrpl.js is a popular JavaScript API for interacting with the XRP Ledger blockchain, also called the Ripple Protocol, a ...

Earlier this month, Google-owned Mandiant also revealed that another security flaw in ICS (CVE-2025-22457) has been ...

As many as 159 CVE identifiers have been flagged as exploited in the wild in the first quarter of 2025, up from 151 in Q4 ...

The exploitation of a security flaw in Innorix Agent for lateral movement is notable for the fact that a similar approach has ...

The solution provides 99% discovery and visibility of all users, workloads, and devices across IT, IoT, OT, and IoMT ...

"A critical security vulnerability has been identified in the Command Center installation, allowing remote attackers to ...