Mackay Sugar, one of Australia’s largest sugar producers, has publicly disclosed a cyberattack that disrupted its operations. The company confirmed unauthorized access to its IT systems and has engaged cybersecurity experts while working with law enforcement. The incident highlights the ongoing thre
Two decades after Apple’s historic transition to Intel processors in 2006, the company has come full circle by moving to its own Apple Silicon chips. This journey reveals a fascinating evolution in hardware security architecture, from the limited protections of PowerPC Macs through Intel’s x86 vulne
The popular OptinMonster WordPress plugin, used by over 1 million websites, was compromised through a supply-chain attack targeting its CDN infrastructure. Attackers injected malicious JavaScript code that redirected legitimate website visitors to fraudulent sites and phishing pages. The breach high
A critical vulnerability chain in LiteLLM, a popular open-source AI gateway and proxy server, allows authenticated users with minimal privileges to escalate permissions and gain complete administrative control. The flaw exploits improper access controls in the role management system, enabling attack
Cisco has released emergency patches for a critical zero-day vulnerability (CVE-2025-20132) in its SD-WAN vManage software that attackers are actively exploiting. The flaw allows unauthenticated remote code execution with root privileges on affected systems. Organizations running Cisco SD-WAN deploy
A critical vulnerability in Microsoft 365 Copilot could have allowed attackers to exfiltrate sensitive user data—including emails, files, and multi-factor authentication codes—through a single click. The flaw exploited Copilot’s AI-driven data access capabilities, leveraging malicious prompts embedd
A newly disclosed security tool called DPAPISnoop enables attackers to extract Windows CREDHIST (Credential History) file hashes for offline cracking, potentially exposing users’ password history. The tool leverages Windows Data Protection API (DPAPI) mechanisms to dump password hash sequences that
A Microsoft-owned website recently became inaccessible to users after its SSL/TLS certificate expired without renewal, triggering browser security warnings and effectively taking the site offline. This embarrassing incident highlights how even tech giants can fall victim to basic certificate managem
A comprehensive year-long analysis of Microsoft Defender for Office 365 reveals significant strengths and weaknesses in email security protection. The benchmark data shows a 97.4% phishing detection rate but identifies concerning gaps in zero-day threat protection and business email compromise (BEC)
A sophisticated China-nexus threat actor has successfully infiltrated multiple medical research networks across public and private sectors, specifically targeting artificial intelligence, cybersecurity, medical research, and national defense data. The campaign demonstrates advanced tradecraft includ