Identity verification has become the cornerstone of digital security, yet many organizations still struggle with implementation. This article outlines five critical best practices: implementing multi-layered authentication, leveraging biometric technologies securely, maintaining continuous verificat
Day 3 of Pwn2Own Berlin 2026 wraps up with $908,750 awarded for 39 zero-days. Teams exploited Red Hat Linux and Windows 11 as the competition nears the million-dollar mark.
Fortinet has disclosed a critical vulnerability in FortiSandbox (CVE-2024-36509) that allows unauthenticated attackers to execute arbitrary commands remotely. The flaw affects FortiSandbox versions 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6, carrying a CVSS score of 9.6. Organizations using affecte
INTERPOL’s Operation Ramz strikes hard: 201 arrested, 382 suspects identified across MENA region. Major cybercrime networks dismantled in historic crackdown.
The Ousaban banking trojan has resurfaced with a refined campaign targeting users in Spain and Portugal through malicious PDF attachments. This malware employs advanced evasion techniques, keylogging capabilities, and remote access functionalities to steal banking credentials and financial data. The
A sophisticated campaign is targeting Signal messenger users by stealing their encrypted backup files and attempting to crack the passphrases offline. Attackers are using social engineering, malware distribution, and cloud storage compromise to access Signal backups stored on victims’ devices or clo
Malicious actors have deployed typosquatted npm packages mimicking popular JavaScript libraries to steal sensitive developer credentials, including cloud provider tokens, CI/CD secrets, and environment variables. These packages contain obfuscated code that exfiltrates data to attacker-controlled ser
The Langflow AI development platform is under active attack due to a critical path traversal vulnerability (CVE-2024-52304) that allows unauthenticated attackers to read arbitrary files from affected systems. Tracked with a CVSS score of 7.5, this flaw enables threat actors to exfiltrate sensitive c
UNC3753, a financially motivated threat actor, has executed an alarming hybrid attack campaign combining social engineering vishing calls with physical break-ins to steal data and extort U.S. organizations. The group targets help desks to obtain VPN credentials, then conducts reconnaissance before s
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Mirasvit’s Full Page Cache Warmer extension for Magento to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, identified as CVE-2024-34102, allows unauthenticated attackers to execute arb