A security researcher has released a new proof-of-concept (PoC) demonstrating that Microsoft's recent fix for a Microsoft Defender vulnerability known as **ShieldBreak** can reportedly be bypassed.
Cybersecurity researchers have uncovered a large-scale cryptojacking campaign that compromised 3,562 unique Redis servers, turning exposed database infrastructure into cryptocurrency-mining workers.
Microsoft has delivered the largest security update in the history of its Patch Tuesday program, addressing 974 vulnerabilities across Windows, Office, SQL Server, Developer Tools, Exchange, SharePoint, Azure and other products.
A maximum-severity vulnerability in **N-able N-central**, a remote monitoring and management (RMM) platform widely used by managed service providers (MSPs) and IT teams, is now being exploited in the wild.
Cybercriminals are increasingly using autonomous artificial intelligence to accelerate attacks, and a new campaign observed by Google Threat Intelligence Group (GTIG) demonstrates just how quickly these operations can scale.
Security researchers have demonstrated a highly dangerous zero-click attack against WeChat that can take over user accounts through an incoming call—without requiring the victim to answer the call, tap a button, or interact with their device.
A sophisticated malware strain known as JSCeal is using stolen browser session cookies to potentially bypass Google authentication and gain unauthorized access to accounts without requiring the victim’s password or a fresh authentication challenge.
Cybersecurity researchers have uncovered an actively exploited zero-day vulnerability affecting Magento Open Source and Adobe Commerce, allowing unauthenticated attackers to execute malicious code and install persistent backdoors on e-commerce servers.
JetBrains has disclosed a security incident in its Cadence cloud service after attackers exploited a critical, unpatched TeamCity vulnerability to gain access to the environment and compromise sensitive credentials, including AWS IAM credentials.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.