Cyber ​​Security Hub

ClickLock uses a fake Cloudflare verification page, locks macOS applications, and forces victims to enter passwords to steal data, crypto wallets, and accounts.

WP2Shell combines two WordPress Core flaws that enable unauthenticated attacks. Businesses should patch, investigate compromise, and monitor websites.

Arctic Wolf identified 292 fake GitHub repositories distributing BoryptGrab, targeting browser data, cryptocurrency wallets, and tokens on Windows.

A recent report from cybersecurity organization Mindgard has highlighted a dangerous vulnerability in the Windows version of Cursor application, allowing malicious actors to execute code directly on developers' machines.

A new study proposes expanding AI pentesting to cover prompts, retrieved data, memory, sensors, and tools that may influence operational behavior.

Trusting official government domains or vetted emails is a common habit for many internet users. However, the hackers behind the dangerous campaign dubbed PhantomEnigma are turning this very trust into a sophisticated attack tool.

On Thursday (June 16), a routing incident deep within the Amazon Web Services (AWS) system abruptly disrupted the operations of thousands of websites worldwide. For over three hours, users attempting to access these platforms received only system error messages, triggering a minor wave of internet chaos before Amazon timely contained and resolved the situation.

Dell has patched CVE-2026-53483 and CVE-2026-53481 in PowerProtect Data Domain, two CVSS 9.8 flaws that may enable remote system compromise.

Recently, Microsoft marked a significant milestone by releasing an unprecedented number of security patches for familiar products like Windows and Office.

SonicWall network device users have once again entered a tense new race against hackers. This time, the culprit is a pair of zero-day security vulnerabilities actively being exploited in the wild, threatening to take complete control of corporate systems.

Microsoft patched 622 flaws in July 2026, including two actively exploited zero-days affecting SharePoint and AD FS. Organizations should update now.

Recently, in the July 2026 routine security update, SAP officially released urgent patches to address a series of critical vulnerabilities. Most notable among them is a vulnerability that nearly reached the absolute severity score (9.9/10), along with seemingly minor loopholes that wide open the door to hackers.

The Claude extension on the Chrome browser is becoming the center of attention in the tech community as security researchers have discovered a critical vulnerability that remains unpatched.

Some vulnerabilities are believed to have remained undetected for 15 to 16 years before being discovered. This raises significant concerns for businesses that rely on open-source infrastructure, virtualization systems, and software components that have been used reliably for long periods.

Learn about the security risks identified in 281 Android VPN applications and the controls businesses should implement.

Apple has sued OpenAI and two former employees over alleged theft of hardware trade secrets. The case highlights insider risk and data controls.

If your business operates a website powered by WordPress and utilizes a Single Sign-On (SSO) tool, this is a critical security update you cannot afford to ignore.

Learn how to prevent data leaks when employees leave through access controls, DLP, log monitoring, and a structured offboarding process.

Zimbra has issued an urgent advisory urging users to promptly update their software to patch a critical security vulnerability.

Sygnia observed an AI-assisted intrusion spread from an internet-facing application to AWS, CI/CD systems, and sensitive data within 72 hours.