Critical Backdoor Vulnerability Found in Webmin, Exposing Millions of Users to Risk A significant security breach has emerged in the popular open-source web-based system for Unix management, Webmin, following the disclosure of a critical zero-day vulnerability last week. The maintainers of Webmin have confirmed that the flaw was not a…
Cybersecurity Landscape Shaken by Surge in Software Supply Chain Attacks In a chilling development for the cybersecurity landscape, the frequency of software supply chain attacks has escalated dramatically, as evidenced by a recent breach involving GitHub. This incident underscores a troubling trend where malicious actors are increasingly compromising legitimate software…
In a significant breach, a pro-Ukrainian hacktivist group known as PhantomCore has been linked to a series of cyberattacks targeting TrueConf video conferencing servers in Russia since September 2025. This revelation stems from a detailed report released by Positive Technologies, highlighting that PhantomCore exploited a chain of three specific vulnerabilities…
In response to mounting concerns over data misuse and the discovery of malicious applications on its platform, Google has announced an expansion of its bug bounty program. This initiative is aimed at enhancing the security of Android applications and Chrome extensions distributed through the Google ecosystem. Two significant announcements were…
Checkmarx, an Israeli security firm, has reported a significant data breach associated with a supply chain vulnerability that exposed sensitive information on the dark web. The investigation traced this unauthorized access back to a cyberattack on March 23, 2026, which compromised the company’s GitHub repository. According to Checkmarx, preliminary findings…
Apple users should remain vigilant regarding recent threats, as a new report from Google researchers reveals that iPhones can be compromised simply by visiting seemingly benign websites. This alarming discovery stems from a series of iPhone hacking exploits uncovered by Google’s Project Zero earlier this year. The researchers identified at…
The Federal Trade Commission (FTC) announced on Thursday that Cox Media Group (CMG), alongside two other marketing firms, MindSift LLC and 1010 Digital Works, will collectively pay nearly $1 million to resolve allegations of misleading practices. These companies purportedly deceived clients by claiming they could deliver targeted advertising based on…
Chinese National Extradited to the U.S. for Cyber Attacks Linked to Silk Typhoon Group A 34-year-old Chinese citizen, Xu Zewei, has been extradited from Italy to the United States, facing charges related to his alleged involvement with the Silk Typhoon hacking group. The extradition, a significant move in international cybersecurity…
Recent research has raised significant concerns regarding the security of widely available GPS tracking devices marketed to ensure the safety of children, elderly individuals, and pets. Cybersecurity experts from Avast have identified vulnerabilities in approximately 600,000 devices sold on major platforms like Amazon, which are priced between $25 and $50.…