Security researchers have uncovered multiple malicious Google Chrome extensions that are abusing browser permissions to steal sensitive data. These include extensions aimed at Meta Business…
npm has completed a major update to how developers authenticate when publishing packages. The change aims to reduce the risk of supply chain attacks by…
A critical unauthenticated remote code execution flaw in BeyondTrust Remote Support and some Privileged Remote Access releases is being actively probed and exploited by attackers.…
A critical remote code execution (RCE) flaw has been found in the widely used next-mdx-remote library that can let attackers run arbitrary code when dynamic…
State-backed and criminal hackers are increasingly using Google’s Gemini AI model to assist with cyberattack campaigns. The misuse covers many parts of an attack lifecycle,…
Cybersecurity researchers have confirmed that a member of the Crazy ransomware gang abused legitimate employee monitoring software and a remote support tool to maintain persistence…
Cybersecurity researchers have uncovered a new Linux botnet operation known as SSHStalker, which targets exposed SSH servers and uses the classic Internet Relay Chat (IRC)…
Microsoft has released its February 2026 Patch Tuesday security updates to fix 59 software vulnerabilities, including six zero-day flaws that have been exploited in the…
Training and demo web applications that are meant to run in safe, isolated environments are being found publicly exposed on enterprise cloud systems. Security research…
Cybersecurity researchers have identified a new ransomware family called Reynolds that embeds a bring-your-own-vulnerable-driver (BYOVD) component directly into its malware payload. This technique lets attackers…
November 21, 2025
1 comment 
