The Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to patch by specified deadlines. The additions include critical flaws current

Apple’s upcoming iOS 27 introduces an automatic password change feature that detects compromised credentials and replaces them without user intervention. This system leverages Apple’s Password Manager integration with known breach databases to identify at-risk accounts and securely generate new pass

Cybercriminals are exploiting Google’s advertising platform to distribute a sophisticated macOS backdoor dubbed “FlutterBridge.” The campaign uses malicious ads that appear at the top of Google search results, mimicking legitimate software downloads. When users click these ads, they’re redirected to

A newly identified China-linked threat cluster designated OP-512 has been observed deploying a sophisticated web shell framework specifically targeting Internet Information Services (IIS) servers. The malware employs cryptographic uniqueness per deployment, advanced obfuscation techniques, and modul

A critical cryptographic vulnerability in Zcash’s shielded transaction system could have allowed attackers to create unlimited counterfeit coins without detection. Discovered and secretly patched in 2018, the flaw affected the zero-knowledge proof system that underpins Zcash’s privacy features. The

Threat actors are cloning legitimate websites of popular reverse engineering and security analysis tools—including Ghidra, dnSpy, and others—to distribute malware-laden versions. These fraudulent sites appear in search results and trick researchers, developers, and security professionals into downlo