Large-Scale Credential Harvesting Operation Targets Vulnerable Next.js Applications A significant credential harvesting operation has been detected exploiting the React2Shell vulnerability, marking a serious threat to numerous organizations. This operation aims to steal sensitive information, including database credentials, SSH private keys, AWS secrets, shell command histories, Stripe API keys, and GitHub…
On July 9, Microsoft released its monthly security updates, addressing a total of 77 vulnerabilities across various software products. Among these, 14 are classified as Critical, 62 as Important, and one as Moderate, underscoring the urgent need for organizations to stay vigilant against cybersecurity threats. The updates encompass a range…
On April 1, 2026, the decentralized exchange Drift, built on the Solana blockchain, was significantly compromised, resulting in an estimated loss of $285 million. The breach was the result of a highly sophisticated attack that allowed unauthorized access to the platform’s administrative powers. According to Drift’s official commentary on the…
Recent revelations from cybersecurity experts have cast a spotlight on an alarming malware campaign targeting Android users. The findings suggest that attackers have stealthily replaced legitimate applications with malicious counterparts on approximately 25 million devices globally. This revelation raises significant concerns about the integrity of widely used applications like WhatsApp,…
Following over 2,000 hours of government-imposed internet blackouts, there are indications that connectivity in Iran is slowly returning as of Tuesday, albeit at significantly reduced levels. The nation’s population of over 90 million has experienced internet outages for most of 2026, starting from a blackout that began on February 28,…
In today’s interconnected digital landscape, cybersecurity incidents are increasingly caused by third-party vendors rather than direct attacks on organizations themselves. Often, these breaches occur through reputable suppliers, Software as a Service (SaaS) applications, or subcontractors that internal IT teams may not even recognize, highlighting a significant vulnerability within enterprise security…
Recent revelations regarding privacy vulnerabilities in the widely-used Zoom video conferencing software have raised significant alarm across both personal and corporate sectors. The disclosed vulnerabilities have not only highlighted potential risks to user privacy but have also indicated serious threats to device security, especially for Mac users. The core issue…
Critical Vulnerability Exposes Millions of AI Agents to Hackers A serious security flaw has been identified in Starlette, an open-source framework widely used by AI agents and tools globally, alerting industry experts to substantial cybersecurity risks. This vulnerability could enable malicious hackers to penetrate servers that host these tools and…
The German Federal Criminal Police Office, known as BKA (Bundeskriminalamt), has identified two prominent figures associated with the now-defunct REvil ransomware-as-a-service (RaaS) operation. This significant development comes amid ongoing efforts to combat ransomware threats globally, drawing attention to the individuals behind the cybercriminal enterprise. One of the individuals, identified as…