Technology ❯ Information Security

Threats

Exploits Malware Exploitation Techniques Exploitation Hacking Data Breaches Hacking Techniques Cyber Attacks Remote Access Trojans Phishing

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

Temporary protection now comes from the built-in mitigation service, pending security updates limited for some older servers.

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Robinhood Patches Sign‑Up Flaw Abused to Send Real‑Looking Phishing Emails

WordPress Pulls Dozens of Plugins After Backdoor Pushes Malware to Thousands of Sites

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Citrix Patches Critical NetScaler Memory-Leak Flaw and Session Mixup Bug

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

Ally WordPress Plugin SQL Injection Leaves Hundreds of Thousands of Sites at Risk

Chrome Flaw Let Malicious Extensions Hijack Gemini Live Before January Patch

SmarterMail Admin-Reset Flaw Under Active Exploitation Days After Patch

Germany’s Cyber Agency Warns of WhatsApp ‘Ghost Pairing’ Account Takeovers

WordPress Modular DS Flaw Under Active Attack as Patch Ships to Block Admin Takeovers

Trend Micro Patches Critical Apex Central RCE as Public Exploits Surface

Gartner Urges Companies to Block AI Browsers as Google Outlines Chrome Agent Safeguards

Have I Been Pwned Adds 2 Billion Emails and 1.3 Billion Passwords From Verified Cache

Hacker Group Claims Nintendo Data Breach as Company Stays Silent

Apple Raises Security Bounty Top Reward to $2 Million in November Overhaul

Samsung Releases Patch for Actively Exploited Android Zero‑Day CVE-2025-21043

Passwordstate Releases Urgent Fix for Admin-Bypass Flaw on Emergency Access Page

DEF CON Demo Shows Browser Extensions Can Hijack Passkeys