Latest Cyber Security News

Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

Ravie LakshmananAug 14, 2026Spyware / Cyber Espionage Apple on Thursday sent a fresh batch of notifications to customers whom it suspects may have...

Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups

Ravie LakshmananAug 14, 2026Cybercrime / Offensive Operation A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination...

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in...

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

Ravie LakshmananAug 13, 2026Zero-Day / Vulnerability A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability,...

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty...
1...181920...37Page 19 of 37

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

Individuals and organizations in Cambodia have emerged as...

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Threat actors linked by Arctic Wolf to Dark...

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

Academic researchers have disclosed a Rowhammer attack impacting...

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

Ravie LakshmananAug 27, 2026Vulnerability / Web Security The...

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice (DoJ) on Wednesday...

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Ravie LakshmananAug 26, 2026Malware / Cyber Espionage Cybersecurity...

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new...

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

Swati KhandelwalAug 26, 2026Red Teaming / Security Operations...