Researchers expose new WordPress malware and ClickFix phishing kits exploiting cache smuggling for stealth attacks.

The access afforded by the ANTSWORD web shell is then used to run the "whoami" command to determine the privileges of the web ...

Three prominent ransomware groups DragonForce, LockBit, and Qilin have announced a new strategic ransomware alliance, once ...

This Halloween, The Hacker News and Specops Software invite you to a live webinar: " Cybersecurity Nightmares: Tales from the ...

Cybersecurity company Imperva, which discovered and reported the problem in July 2025, described CVE-2025-53967 as a "design ...

This includes a Russian‑language threat actor, who is said to have used the chatbot to help develop and refine a remote ...

AI-driven threats are redefining identity security, demanding smarter authentication and preemptive defense strategies.

The executable is a Golang malware dubbed Vampire Bot that can profile the infected host, steal a wide range of information, ...

Google’s DeepMind unveils CodeMender, an AI agent that auto-fixes code vulnerabilities and enhances software security.

LayerX finds AI tools now drive most enterprise data leaks, with 77% of sensitive data pasted via personal accounts.

XWorm V6.0 is designed to connect to its C2 server at 94.159.113 [.]64 on port 4411 and supports a command called "plugin" to ...

Microsoft links Storm-1175 to GoAnywhere flaw CVE-2025-10035, exploited since September for Medusa ransomware.