The Internet Society Foundation has launched the Common Good Cyber Fund, a $1 million grant program aimed at strengthening cybersecurity infrastructure and capacity in underserved regions worldwide. The initiative will support projects focused on defensive security, capacity building, and resilience
Microsoft has purged 119 malicious browser extensions from the Edge Add-ons store following the discovery of a sophisticated malware campaign dubbed “StegoAd.” The extensions used steganography to conceal malicious code within seemingly innocent image files and custom fonts, enabling attackers to in
Two former executives of US-based payment processing companies have pleaded guilty to federal charges for their role in facilitating a massive tech support scam operation. The executives knowingly processed payments for fraudulent tech support schemes that defrauded thousands of victims, primarily e
A sophisticated phishing campaign is actively targeting WhatsApp users with malicious documents disguised as legitimate business files. Attackers are distributing weaponized archives containing VBScript-based malware that establishes persistent access to victim systems. The campaign exploits trust i
DEVCORE dominates Pwn2Own Berlin 2026, claiming Master of Pwn title. 47 zero-days discovered, $1.3M paid out in three intense days of hacking competition.
Microsoft has issued a public apology and reversed its stance following a heated dispute with a security researcher who disclosed a zero-day vulnerability. The tech giant initially threatened the researcher with legal action and refused a CVE assignment, sparking widespread criticism from the cybers
A critical remote code execution (RCE) vulnerability (CVE-2025-14266) has been discovered in 7-Zip, one of the world’s most popular file compression utilities. The flaw resides in the XZ archive format decompression module and allows attackers to execute arbitrary code when a victim extracts a speci
A critical zero-day vulnerability in Microsoft Exchange Server is being actively exploited through weaponized email attacks. Threat actors are leveraging this previously unknown flaw to gain unauthorized access to corporate mail servers, execute remote code, and establish persistent access to compro
Microsoft has confirmed that certain Windows 11 systems are experiencing failures when attempting to install the latest monthly security updates. This issue prevents affected machines from receiving critical patches that address actively exploited vulnerabilities, leaving them exposed to known attac
Cisco has released security patches for CVE-2026-20230, a critical SQL injection vulnerability in Unified Communications Manager (UCM) with a CVSS score of 9.8. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries and potentially gain complete system control. With proof-