Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs, and government domains.

IoT penetration testing is a security assessment of the complete IoT ecosystem, from backend systems and cloud services to mobile devices and hardware. It involves a multi-stage simulated attack on ...

The campaign used a compromised Telegram account, a fake Zoom meeting, and AI-assisted deception to trick victims into ...

Your cloud isn’t at risk because it’s fast; it’s at risk because thousands of invisible machine identities outlive your control.

Callback phishing jumps 500%, cybercriminals turn trust and legitimacy against organizationsLONDON, Feb. 4, 2026 /PRNewswire/ -- VIPRE Security Group, a global leader and award-winning cybersecurity ...

CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.

Multiple threat actors, both state-sponsored and financially motivated, are exploiting the CVE-2025-8088 high-severity vulnerability in WinRAR for initial access and to deliver various malicious ...

We are seeing exploitation of SolarWinds Web Help Desk via CVE‑2025‑40551 and CVE‑2025‑40536 that can lead to domain ...

Ransomware operators are hosting and delivering malicious payloads at scale by abusing virtual machines (VMs) provisioned by ...

Criminal actors pulled in $158 billion in digital assets last year, which marked a sudden increase in the value of illicit activity after years of decline, according to a report released by TRM Labs ...