Cyber Security

Microsoft AntiSSRF open-source library helps block s...

AntiSSRF is an open-source code library from Microsoft that validates URLs an...

Product showcase: From phishing texts to risky Wi-Fi...

Norton 360 Deluxe combines device security, scam detection, web protection, a...

Navigating SEC, NIS2, and DORA incident disclosure t...

In this Help Net Security video, Rick Goud, Global Field CTO at Kiteworks, di...

The checklist problem behind critical infrastructure...

An asset owner can meet major federal cyber compliance standards and still ru...

Malicious JetBrains Marketplace plugins steal AI API...

At least 15 malicious plugins found on the JetBrains Marketplace were designe...

Fileless Phantom Stealer Targets Browser Credentials

In addition to executing entirely in memory, the malware's infection chain in...

Security Community Slams US Ban on Exporting Mythos,...

An open letter signed by dozens of security experts asked the government to r...

New Rokarolla Android malware targets 217 banking, c...

A new Android banking trojan named Rokarolla is targeting 217 banking and cry...

HTTP/2 Bomb Attacks Put Telcos, Healthcare Orgs at Risk

The denial-of-service (DoS) exploit takes advantage of two features in HTTP/2...

Google Vertex AI SDK Flaw Let Attackers Hijack Model...

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no a...

ClickFix Campaigns Expand Malware Delivery With New ...

Cybersecurity researchers have flagged multiple ClickFix campaigns that deliv...

Steam Workshop abused to spread malware via Wallpape...

Threat actors are abusing Steam Workshop, Valve's community hub for downloadi...

SprySOCKS Windows Variant Abuses Kernel Drivers to E...

FishMonger, a China-nexus threat group, has deployed an undocumented version ...

Rokarolla Android Trojan Levels Up to Full Device Co...

The emerging malware, spread via fake TikTok and Chrome downloads, demonstrat...

Attackers are exploiting FortiSandbox vulnerabilities

Attackers have been spotted exploiting three vulnerabilities (CVE-2026-39813,...

Cybercriminals mask malicious communications through...

The DragonForce ransomware group used a custom malware called Backdoor.Turn t...