Cybersecurity News & Updates

CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Order...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added...

Oracle Patches Critical CVE-2026-21992 Enabling Unauthe...

Oracle has released security updates to address a critical security flaw impacti...

Trivy Security Scanner GitHub Actions Breached, 75 Tags...

Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, ...

FBI Warns Russian Hackers Target Signal, WhatsApp in Ma...

Threat actors affiliated with Russian Intelligence Services are conducting phish...

Trivy Supply Chain Attack Triggers Self-Spreading Canis...

The threat actors behind the supply chain attack targeting the popular Trivy sca...

Who is the Kimwolf Botmaster “Dort”?

In early January 2026, KrebsOnSecurity revealed how a security researcher disclo...

How AI Assistants are Moving the Security Goalposts

AI-based assistants or "agents" -- autonomous programs that have access to the u...

Microsoft Patch Tuesday, March 2026 Edition

Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities...

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm ...

A hacktivist group with links to Iran's intelligence agencies is claiming respon...

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

The U.S. Justice Department joined authorities in Canada and Germany in dismantl...

Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe

A Minnesota cybersecurity and computer forensics expert whose testimony has feat...

Patch Tuesday, April 2025 Edition

Microsoft today released updates to plug at least 121 security holes in its Wind...

China-based SMS Phishing Triad Pivots to Banks

China-based purveyors of SMS phishing kits are enjoying remarkable success conve...

Trump Revenge Tour Targets Cyber Leaders, Elections

President Trump last week revoked security clearances for Chris Krebs, the forme...

Funding Expires for Key Cyber Vulnerability Database

A critical resource that cybersecurity professionals worldwide rely on to identi...

Rogue npm Packages Mimic Telegram Bot API to Plant SSH ...

Cybersecurity researchers have uncovered three malicious packages in the npm reg...