Cybercriminals Target Travel Industry with Advanced Phishing Attacks Recent investigations have unveiled a series of sophisticated phishing attacks targeting hotels and travel accommodations, prompting concerns within the industry. Researchers from Norton have indicated that although not all phishing messages can be directly traced back to breaches of internal hotel systems,…
Secrets Sprawl on the Rise: Key Insights from GitGuardian’s 2026 Report The phenomenon of “secrets sprawl,” referring to the uncontrolled proliferation of sensitive information such as API keys, passwords, and tokens within code and other environments, shows no signs of abating. According to GitGuardian’s latest report on the state of…
Google has initiated the rollout of its monthly security updates for Android, addressing 33 newly identified vulnerabilities, nine of which are classified as critical. These vulnerabilities impact various components of the Android ecosystem, including the operating system itself, the framework, libraries, media framework, and certain proprietary Qualcomm components. Among the…
Businesses that downloaded Zoom from unofficial sources earlier this year may have inadvertently exposed their devices to malware associated with the Iranian hacking group, Nimbus Manticore. Check Point Research (CPR) has recently highlighted a series of cyberattacks orchestrated by Nimbus Manticore, also identified as UNC1549, which is linked to the…
Anthropic has recently come forward regarding an unintentional disclosure of internal code from its AI coding assistant, Claude Code, attributed to human error. This incident did not expose sensitive customer information or credentials, as confirmed by an Anthropic spokesperson in a statement published by CNBC News. The company clarified that…
Security Vulnerability Exposed in Zoom Video Conferencing Software on macOS A critical security vulnerability affecting Zoom’s video conferencing software has come to light, raising significant privacy concerns for users operating on Mac computers. Reports indicate that any website accessed through the browser has the potential to activate a user’s webcam…
In a recent development in cybersecurity, researchers have unveiled a novel attack method known as FROST, which exploits the isolation of file systems within browsers to infer user activity. This technique hinges on monitoring the Input/Output (I/O) interactions of Solid State Drives (SSDs), allowing attackers to identify applications and websites…
Recently, the Computer Emergency Response Team of Ukraine (CERT-UA) revealed a significant phishing campaign that involved attackers impersonating the agency itself. The campaign, which deployed a remote administration tool named AGEWHEEZE, was executed through fake email communications sent on March 26 and 27, 2026. The threat actors identified as UAC-0255…
A significant security vulnerability has surfaced in Lodash, a widely utilized JavaScript library employed in over four million projects on GitHub alone. This issue poses a high risk, allowing attackers to potentially jeopardize the services leveraging this library and impact their user bases significantly. Lodash, accessible at lodash.com, offers developers…