Google patched 62 flaws, including two actively exploited kernel bugs, closing exploit chains used in Android attacks.

CERT-UA identifies GIFTEDCROOK malware stealing browser data via phishing Excel files in attacks targeting Ukrainian ...

A recently disclosed critical security flaw impacting CrushFTP has been added by the U.S. Cybersecurity and Infrastructure ...

Fast flux exploits DNS gaps to evade takedowns since 2007, enabling resilient malware and phishing operations.

This week, we trace how simple oversights turn into major breaches — and the silent threats most companies still ...

PoisonSeed exploits CRM credentials to spread cryptocurrency seed phrase attacks, risking major wallet compromises.

GitHub Copilot adoption rose 27% (2023–2024), causing a 40% spike in secret leaks, widening enterprise attack surfaces.

North Korean actors used 11 npm packages downloaded 5,600+ times to spread BeaverTail malware, expanding attacks to Bitbucket ...

MFA bypass attacks surge with session hijacking and token theft, requiring layered defenses to limit breach impact.

EncryptHub, also tracked under the monikers LARVA-208 and Water Gamayun, was spotlighted in mid-2024 as part of a campaign ...

AI copilots streamline security compliance by automating audits, evidence collection, and policy support, improving ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...