UNC3886 exploits Juniper routers with six TinyShell-based backdoors, evading detection and maintaining persistence.

GreyNoise reports 400+ IPs exploiting multiple SSRF vulnerabilities, targeting cloud services and global networks. Patch now.

Microsoft fixes 57 security flaws, including six zero-days exploited in the wild. CISA mandates patches by April 1.

AI is reshaping pentesting by automating tasks, enhancing efficiency, and empowering testers—without replacing them ...

Hackers use polymorphic browser extensions to mimic real add-ons, steal credentials, and hijack accounts. Affects Chrome, ...

Apple patches WebKit zero-day CVE-2025-24201, exploited in sophisticated attacks before iOS 17.2. Update secures iOS, macOS, ...

CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List | Read more hacking news ...

CTM360 detects 6,000+ fake Google Play pages spreading PlayPraetor malware, stealing banking credentials and MFA codes for ...

Compliance isn’t security. Adversarial Exposure Validation reveals exploitable vulnerabilities, helping teams cut through the ...

Ballista botnet exploits TP-Link router flaw CVE-2023-1389, infecting 6,000+ devices worldwide and evolving to use TOR.

State-sponsored hacking, IoT botnets, ransomware shifts—this week's cyber roundup covers it all. Stay informed, stay secure.

Cybercriminals use steganography to hide malware inside images, evading security tools and enabling stealthy attacks. Learn ...