Technology ❯ Cybersecurity

Security Measures

Two-Factor Authentication Incident Response Multi-Factor Authentication Patch Management Patching Firmware Updates Data Protection Endpoint Security Incident Monitoring Disruption Efforts

ToxicPanda 2.0 Expands to 349 Financial Apps and Leverages Android Features for Shell Access

Researchers warn the malware automates legitimate Android features to harvest credentials, evading Play Protect and hiding payload delivery.

Akira Affiliate Reboots Host Into Safe Mode to Disable EDR and Crashes Its Own Encryptor

Microsoft Warns ClickFix Campaign Uses BNB Chain to Host Malware Instructions

77 Evil-Twin Extensions Removed From Open VSX After Data-Collection Campaign

Unit 42 Reveals Three Post‑Compromise ‘Pass‑ta‑key’ Attacks Targeting Google Passkeys

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Attackers Exploit Critical ServiceNow RCE Flaw

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

MetaMask Shifts From Wallet to Onchain Financial Platform

Dashlane Confirms Brute-Force Attack and Says Fewer Than 20 Encrypted Vaults Were Downloaded

Nine-Year Linux Kernel Flaw Lets Local Users Steal SSH Keys and Gain Root

Ivanti Patches EPMM Zero‑Day Under Active Exploitation as CISA Orders Fix by May 10

UK Survey Finds Cyber Breaches Stubbornly High, Driven by Phishing

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Magento ‘PolyShell’ Exploited at Scale as New WebRTC Skimmer Bypasses Site Defenses

Qualys Discloses 'CrackArmor' Flaws in Linux AppArmor Exposing Root and Container Escapes

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

Riot's Vanguard Now Blocks Unpatched PCs Over Motherboard IOMMU Flaw

Bybit Report Says 16 Blockchains Can Freeze Funds, 19 Others Could Enable It