SaaS threats soared in 2024, with 7,000 password attacks blocked per second, phishing up 58%, and $3.5 billion in losses.

Malicious npm packages impersonate Hardhat, exfiltrating private keys and mnemonics, with 1,092 downloads reported.

FireScam malware disguises as Telegram Premium, exploiting permissions for data theft and persistent device control ...

CVE-2024-43405 in Nuclei allows signature bypass, enabling arbitrary code execution. Update to version 3.3.7 for critical ...

Apple has agreed to pay $95 million to settle a proposed class action lawsuit that accused the iPhone maker of invading users ...

New Likert-scale-based AI jailbreak technique boosts attack success rates by 60%, highlighting urgent safety challenges.

U.S. sanctions Integrity Technology Group for aiding Flax Typhoon's state-sponsored hacks, targeting U.S. systems since 2021.

German prosecutors charged three Russian-German nationals for espionage and sabotage, targeting German-U.S. military ...

Three patched Dynamics 365 and Power Apps vulnerabilities exposed sensitive data, highlighting risks of API flaws.

A new report from the Washington Post published on January 1, 2024, revealed that the December cyber attack by Chinese threat ...

The CVE-2024-49113 PoC devised by SafeBreach Labs, codenamed LDAPNightmare, is designed to crash any unpatched Windows Server ...

Cybersecurity researchers have uncovered three security weaknesses in Microsoft's Azure Data Factory Apache Airflow ...