A cyberattack described by Polish officials as the most serious assault on the country’s energy infrastructure in years has been linked to the Russian state-backed hacking group Sandworm. The incident happened during the final week of December 2025 and targeted…
Security researchers have uncovered a new multi-stage phishing operation aimed at users in Russia, delivering a combination of ransomware and a remote access trojan (RAT) known as Amnesia RAT. According to a recent analysis from Fortinet FortiGuard Labs, the campaign…
Security researchers have uncovered a weakness inside the web control panel used by operators of the StealC malware, turning the attackers’ own infrastructure into an unexpected source of intelligence. The flaw is a cross-site scripting (XSS) vulnerability that allowed researchers…
Several AMD EPYC processor families have been found vulnerable to a new hardware-level attack that undermines protections designed for confidential virtual machines. The affected chips include both standard and embedded variants across the EPYC 7003, 8004, 9004, and 9005 series.…
Not long ago, the cloud was sold as the ultimate fix for security risks and reliability problems. The promise was simple: move everything to managed platforms and let someone else worry about uptime and protection. In exchange for that convenience,…
In today’s cybersecurity landscape, the gap between routine maintenance and a full-blown security incident is shrinking fast. Systems that once felt stable are now under constant strain as organizations roll out new AI features, automated workflows, and connected services. Each…
Cybersecurity researchers have uncovered a novel attack technique that abused indirect prompt injection to sidestep safeguards in Google Gemini, turning Google Calendar into an unexpected data-leak channel. According to findings shared by Miggo Security, attackers were able to sneak a…
Security researchers have uncovered a new tactic used by the JavaScript-based malware loader known as GootLoader, showing how threat actors are abusing broken ZIP archives to evade analysis and security tools. According to a recent report from Expel, attackers are…
OpenAI has announced plans to introduce advertising in ChatGPT for logged-in adult users in the United States. The rollout will apply to both the free version and the low-cost ChatGPT Go tier, with testing expected to begin in the coming…
Ukrainian and German investigators have uncovered the identities of two Ukrainian nationals believed to be involved with Black Basta, a ransomware-as-a-service operation linked to Russia. Authorities also announced that the group’s suspected leader, 35-year-old Russian citizen Oleg Evgenievich Nefedov, has…
