This Week in Cybersecurity: Small Threats, Big Impact This week’s cybersecurity landscape doesn’t come with one major headline, but that doesn’t mean things are quiet. Instead, there’s a steady buildup of smaller threats, many of which are surprisingly effective. Some…
EDR Killers Are Helping Ransomware Bypass Security Defenses A new cybersecurity report has revealed how attackers are increasingly using specialized tools known as EDR killers to shut down security systems before launching ransomware attacks. These tools are designed to disable…
Apple Issues Urgent Warning Over iOS Exploit Attacks Apple is calling on iPhone users running older versions of iOS to update their devices immediately following the discovery of active web-based attacks using exploit kits known as Coruna and DarkSword. These…
Authorities Disrupt Massive IoT Botnets Behind Global DDoS Attacks The U.S. Department of Justice has announced a major operation targeting several large botnets responsible for some of the most powerful distributed denial-of-service (DDoS) attacks ever recorded. The operation focused on…
New Magento Vulnerability Could Lead to Full Store Compromise A serious security issue has been discovered in Magento’s REST API that could let attackers upload malicious files without authentication. If exploited, the flaw could allow hackers to execute code on…
AI Is Changing Cybercrime Faster Than Security Can Adapt Artificial Intelligence is transforming how businesses operate, but it’s also giving cybercriminals new tools to launch smarter and more effective attacks. From phishing emails that feel personal to malware that constantly…
Google Introduces 24-Hour Delay for Android App Sideloading to Boost Security Google has rolled out a new security update for Android that adds a 24-hour waiting period before users can install apps from unverified sources. The move is part of…
INTERPOL Dismantles Major Cybercrime Infrastructure in Global Operation INTERPOL has announced the disruption of a massive cybercrime network after authorities shut down more than 45,000 malicious IP addresses and servers linked to phishing attacks, malware distribution, and ransomware operations. The…
GlassWorm Attack Evolves, Targeting Developers Through VS Code Extension Supply Chain Cybersecurity researchers have uncovered a new phase of the GlassWorm malware campaign, revealing a more advanced method of spreading malicious code through the Open VSX extension registry used by…
CISA Flags Three Actively Exploited Vulnerabilities in SolarWinds, Ivanti, and Workspace One The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog by adding three newly identified security flaws that are currently being used…
