20 articles
The report assesses the cybersecurity landscape against the NIS2 directive, highlighting a growing gap between the evolving threat landscape and the pace of ...
The exploitation chain begins with a weaponized HTML Application payload called GammaPhish, which retrieves intermediate Visual Basic Script (VBScript) downl...
Study points out that AI has shattered the model of patching on a two- to four-week schedule.
The actively exploited vulnerability, identified as CVE-2025-48595, is a high-severity flaw in the Android Framework that allows local attackers to gain code...
The campaign commences with a spear-phishing email containing a ZIP archive with a malicious LNK file written in Pashto, designed to exploit the familiarity ...
The vulnerability, CVE-2024-21182, affects Oracle WebLogic Server versions 12.2.
The MCP Server for Sectigo Certificate Manager acts as a secure intermediary between AI agents, such as Microsoft Copilot and Claude, and Sectigo's certifica...
The DriveSurge threat actor operates as an initial access broker, utilizing a pay-per-install model to facilitate subsequent attacks, according to research b...
JupiterOne Inc. has launched JupiterOne Continuous Controls Monitoring (CCM), a new product designed to test the effectiveness of security and compliance con...
Here’s what to do in a world where credential theft has been automated and turned into a commodity.
The arrested individual is accused of disseminating data from entities such as the State Attorney General's Office, INCIBE, the National Police, the Civil Gu...
The company was criticized after a blog posted that suggested law enforcement involvement.
The malware campaign, discovered in July 2025, has affected approximately 1,980 WordPress sites.
The report highlights a significant trend where threat actors are leveraging artificial intelligence (AI) to amplify the scale and effectiveness of their att...
The new AI Assistant Detection product provides real-time visibility into traffic from major AI assistants like ChatGPT, Gemini and Claude.
The data analyzed by the Ransomnews Research Team indicates that ransomware operations largely follow a business week, with significantly fewer posts on Sund...
The vulnerability, with a CVSS score of 8.7, can be exploited with low privileges and complexity.