North Korea Expands Software Supply Chain Attacks with 67 Malicious npm Packages
North Korea’s Lazarus Group escalates its Contagious Interview campaign with XORIndex malware in npm packages, targeting developers and crypto holders…
Fortinet Patches Critical SQL Injection Vulnerability in FortiWeb (CVE-2025-25257)
Fortinet has released a critical security patch for FortiWeb addressing CVE-2025-25257, a high-severity SQL injection vulnerability that allows unauthenticated attackers…
Critical Chrome Zero-Day CVE-2025-6554 Actively Exploited: CISA Issues Urgent Patch Mandate
Critical Chrome zero-day CVE-2025-6554 actively exploited via V8 engine flaw—impacts all Chromium-based browsers. CISA mandates urgent patching by July 23,…
When Ransomware Strikes Close to Government: Lessons from the Radix Foundation Breach
A ransomware attack against Switzerland’s Radix Foundation has compromised sensitive health-related data and exposed vulnerabilities in third-party data custodianship —…
How to Safely Search the Dark Web for Leaked Emails or Usernames
Learn how to safely check if your email or username is exposed on the dark web using the Cyber Risk…
The Invisible Threat: How Free VPN Browser Plugins Enable APT Intrusions
Free VPN browser plugins pose a critical risk in enterprise networks. Recent behavior shows automated connections to APT28-linked domains—often without…
Windows Remote Desktop Services Vulnerability Allows Remote Code Execution
A critical Windows Server vulnerability (CVE-2025-32710) allows unauthenticated remote code execution via RD Gateway. Organizations must patch immediately to prevent…
INTERPOL’s Operation SECURE Dismantles 20,000 Malicious Assets in Major Crackdown on Infostealers
INTERPOL’s Operation SECURE dismantled 20,000 malicious assets tied to infostealer malware, arresting 32 suspects and seizing 41 servers across 26…