GitHub experienced a major global outage that brought critical CI/CD pipelines to a halt across thousands of organizations. The incident affected GitHub Actions, GitHub Pages, API services, and repository access, leaving development teams unable to deploy code, run automated tests, or access version
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These fraudulent “hacks” and “cracks” promise lifetime Premium access but instead install malicious software that harvests credentials, cryptocurrenc
CISA has added a critical Ubiquiti UniFi OS vulnerability (CVE-2025-23093) to its Known Exploited Vulnerabilities catalog after detecting active exploitation in the wild. The flaw, affecting UniFi OS Console versions before 4.1.9, allows unauthenticated remote attackers to execute arbitrary commands
Canadian cybersecurity executive arrested for federal extortion linked to ShinyHunters’ FBI systems attack. The case highlights insider threat risks and the need for robust privileged access controls and behavioral monitoring in security programs.
Oxford University has confirmed a second security breach within weeks, this time compromising student data through its career services platform. The incident exposed personal information of students and alumni who used the university’s career management system. This follows a separate breach earlier
AI-generated phishing attacks are overwhelming Security Operations Centers (SOCs) with unprecedented alert volumes, causing severe burnout among Tier 1 analysts and creating dangerous detection blind spots. Modern AI tools enable attackers to craft highly personalized, contextually accurate phishing
CVE-2025-64393 affects Veeam Backup & Replication with CVSS 9.4 severity. Low-privileged Backup Viewer accounts can execute arbitrary code through insecure deserialization. Immediate patching required to protect backup infrastructure from compromise.
OWASP has launched CVE Lite CLI, a lightweight command-line vulnerability scanner designed to help developers quickly identify known vulnerabilities in their project dependencies. This open-source tool provides fast, offline-capable CVE scanning without the overhead of enterprise solutions, making s
Mozilla to UK government: Breaking encryption and banning VPNs won’t solve your age verification problems—it’ll just destroy basic security for everyone.
The Five Eyes intelligence alliance has issued a fresh warning about renewed Chinese espionage operations targeting government officials, defense contractors, and critical infrastructure workers through LinkedIn. Threat actors are creating sophisticated fake profiles to establish trusted relationshi