Security researchers have revealed details about a new ransomware strain named Osiris, linked to an attack against a large food service franchisee operator in Southeast Asia in November 2025. According to investigators from Symantec and VMware Carbon Black Threat Hunter…
Microsoft has issued a warning about a complex, multi-stage phishing campaign targeting organizations in the energy sector, where attackers combine adversary-in-the-middle (AitM) phishing with business email compromise (BEC) tactics to spread across multiple victims. According to Microsoft’s Defender Security Research…
. The company said the new entity, TikTok USDS Joint Venture LLC, was formed in response to an executive order signed by U.S. President Donald Trump in September 2025. Under the agreement, TikTok’s parent company ByteDance will reduce its ownership…
Fortinet has confirmed it is working on a complete fix for a FortiGate authentication issue tied to FortiCloud SSO, after detecting new exploitation attempts — including cases where devices were already running the latest available firmware at the time of…
Not long ago, the cloud was sold as the ultimate fix for security risks and reliability problems. The promise was simple: move everything to managed platforms and let someone else worry about uptime and protection. In exchange for that convenience,…
Cybersecurity researchers have uncovered a novel attack technique that abused indirect prompt injection to sidestep safeguards in Google Gemini, turning Google Calendar into an unexpected data-leak channel. According to findings shared by Miggo Security, attackers were able to sneak a…
Security researchers have uncovered a new tactic used by the JavaScript-based malware loader known as GootLoader, showing how threat actors are abusing broken ZIP archives to evade analysis and security tools. According to a recent report from Expel, attackers are…
Ukrainian and German investigators have uncovered the identities of two Ukrainian nationals believed to be involved with Black Basta, a ransomware-as-a-service operation linked to Russia. Authorities also announced that the group’s suspected leader, 35-year-old Russian citizen Oleg Evgenievich Nefedov, has…
Microsoft has released its first Patch Tuesday updates for 2026, rolling out fixes for 114 security vulnerabilities across Windows and related products. One of the flaws, the company confirmed, is already being exploited in real-world attacks. Of the total issues…
A new 2026 web security study has found that third-party applications are accessing sensitive user data on a majority of major websites without a clear business reason. After analyzing 4,700 high-traffic sites, researchers discovered that 64% of third-party tools now…
