The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...

A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...

The security company Synthient currently sees more than 2 million infected Kimwolf devices distributed globally but with ...

DarkSpectre refers to three malware campaigns tied to malicious browser extensions, including 'sleeper' extensions that seem legit, but are not.

Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...

Discover how fake AI Chrome extensions stole ChatGPT conversations from 900k users. Learn about the risks and how to protect ...

Transparent Tribe (APT36) is linked to new cyber-espionage attacks using malicious LNK files, adaptive RATs, and long-term ...

Some stories, though, were more impactful or popular with our readers than others. This article explores 15 of the biggest ...

RondoDox botnet exploits the React2Shell vulnerability in Next.js, with over 90,000 exposed systems used to deploy miners and ...

Windows 10 is no longer going to receive free security updates in the future, but that doesn't mean you have to update to ...

2025 included a number of monumental threats, from global nation-state attacks to a critical vulnerability under widespread ...

Cardano users are currently being targeted in a new wallet phishing campaign. According to reports, the sophisticated ...