Google Introduces 24-Hour Delay for Android App Sideloading to Boost Security Google has rolled out a new security update for Android that adds a 24-hour waiting period before users can install apps from unverified sources. The move is part of…
CISA Flags Three Actively Exploited Vulnerabilities in SolarWinds, Ivanti, and Workspace One The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog by adding three newly identified security flaws that are currently being used…
Hackers Target Salesforce Experience Cloud Sites Using Modified AuraInspector Tool Salesforce has alerted customers to a surge in malicious activity targeting publicly accessible Experience Cloud websites, where attackers are attempting to exploit configuration mistakes to gain access to sensitive information.…
Russian APT28 Hackers Deploy New Malware to Spy on Ukrainian Military Personnel A Russian state-backed cyber espionage group known as APT28 has been using new malware tools to monitor Ukrainian military targets over an extended period, according to recent cybersecurity…
Google Looker Studio Vulnerabilities Could Have Exposed Cloud Databases Across Organizations Cybersecurity researchers have uncovered a series of serious security weaknesses in Google Looker Studio that could have allowed attackers to access sensitive data stored in organizations’ Google Cloud environments.…
Webinar Explores How Smaller Organizations Can Improve Security While Reducing Complexity Many mid-sized companies are under growing pressure to maintain cybersecurity standards similar to large enterprises. With the rise of supply chain attacks and stricter security expectations from partners and…
North Korean Cyber Group Suspected in Major Cloud Attack on Crypto Firm A sophisticated cyberattack targeting a cryptocurrency organization in 2025 has been linked to a North Korean hacking group known as UNC4899, according to new threat intelligence findings. Security…
Fake OpenClaw npm Package Found Delivering RAT and Data-Stealing Malware Security researchers have uncovered a dangerous npm package posing as an installer for OpenClaw. Instead of installing legitimate software, the package secretly deploys malware designed to steal sensitive information and…
Two Critical Security Flaws Added to CISA’s KEV List The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two serious security vulnerabilities affecting Hikvision surveillance devices and Rockwell Automation industrial software to its Known Exploited Vulnerabilities (KEV) catalog. The…
Microsoft Warns of New Social Engineering Campaign Security researchers have uncovered a new cyber campaign that tricks users into launching malicious commands through Windows Terminal, eventually installing the Lumma Stealer information-stealing malware. The attack method, recently identified by Microsoft Threat…
