The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,259 reports across 7 topics, updated hourly.
Russian state-sponsored hacking group, identified as Star Blizzard, has been actively employing a sophisticated social engineering tactic involving the distribution of fake event invitations to compromise Windows computer systems. Microsoft's Threat Intelligence team reported on this campaign, detailing how…
A new variant of the Spectre CPU vulnerability, codenamed Branch Target Reuse (BTR), has been disclosed by academics from VUSec and Scuola Superiore Sant'Anna. This variant specifically targets Just-In-Time (JIT) engines found in web browsers, language runtimes, and the operating…
Kiteworks announced on Monday that it successfully identified and remediated a critical security vulnerability that was discovered during a scheduled precautionary shutdown over the weekend. The company collaborated closely with federal intelligence authorities throughout this process, underscoring the severity…
Cybersecurity researchers have identified a significant threat to software developers, uncovering a cluster of 101 malicious npm packages designed to forcibly subscribe users to WhatsApp groups. This campaign, dubbed PhantomSub, exploits the 'Baileys' open-source WhatsApp project to add unsuspecting victims…
Dutch police have arrested a 24-year-old man from Amsterdam as part of an ongoing investigation into the activities of the hacker group ShinyHunters. The Politie Landelijke Opsporing en Interventies, the national police unit for investigations and interventions, confirmed the arrest…
A significant security vulnerability has been identified within the official MCP Python SDK, potentially allowing malicious servers to intercept and steal OAuth credentials from applications that rely on this SDK for authentication.
Apple released security updates on March 18, 2026, to address a critical vulnerability affecting older versions of its operating systems, including iOS, iPadOS, and macOS. The company stated that this flaw, identified as CVE-2026-86950, may have been exploited in targeted…