A critical remote code execution (RCE) flaw has been found in the widely used next-mdx-remote library that can let attackers run arbitrary code when dynamic…
State-backed and criminal hackers are increasingly using Google’s Gemini AI model to assist with cyberattack campaigns. The misuse covers many parts of an attack lifecycle,…
Cybersecurity researchers have confirmed that a member of the Crazy ransomware gang abused legitimate employee monitoring software and a remote support tool to maintain persistence…
Cybersecurity researchers have uncovered a new Linux botnet operation known as SSHStalker, which targets exposed SSH servers and uses the classic Internet Relay Chat (IRC)…
Microsoft has released its February 2026 Patch Tuesday security updates to fix 59 software vulnerabilities, including six zero-day flaws that have been exploited in the…
Training and demo web applications that are meant to run in safe, isolated environments are being found publicly exposed on enterprise cloud systems. Security research…
Cybersecurity researchers have identified a new ransomware family called Reynolds that embeds a bring-your-own-vulnerable-driver (BYOVD) component directly into its malware payload. This technique lets attackers…
This week’s global security update wave saw more than 60 software vendors issue important patches to fix vulnerabilities across a wide range of technology stacks.…
Pakistan-aligned threat groups APT36 and SideCopy are actively targeting Indian defense and government-linked organizations with cross-platform remote access trojans designed for long-term espionage. The latest…
Apple has released urgent security updates across iOS, iPadOS, macOS, tvOS, watchOS, and visionOS to fix a zero-day vulnerability that was actively exploited in the…
November 21, 2025
1 comment 
