Latest

Researchers at Dr. Web have uncovered a sophisticated Android backdoor targeting Russian business representatives. The malware offers extensive surveillance and data theft capabilities, including: * Recording conversations * Streaming live camera footage * Stealing data from messengers and browsers * Keylogging Malware Evolution and Targeting Dubbed Android.Backdoor.916.origin, the Kotlin-based malware first

More than 29,000 Microsoft Exchange servers remain unpatched against CVE-2025-53786, a severe security flaw that could allow attackers to move laterally into Microsoft cloud environments and potentially achieve full domain compromise. How the Vulnerability Works The flaw allows attackers with administrative access to on-premises Exchange servers to escalate privileges

A security researcher known by the alias Micky has received a record-breaking $250,000 bounty from Google for discovering a critical Chrome vulnerability that allowed attackers to bypass the browser’s sandbox. The flaw, tracked as CVE-2025-4609, was first identified in April 2025 and patched in mid-May with the release

Security researchers at ESET have confirmed that a recently patched flaw in WinRAR (CVE-2025-8088) was exploited as a zero-day in phishing campaigns to deliver the RomCom malware. The vulnerability, a directory traversal issue, was addressed in late July with the release of WinRAR version 7.13. It allowed attackers to

Google has confirmed that a recent data breach tied to a Salesforce compromise exposed information belonging to Google Ads customers. Last week, the company acknowledged it was impacted by a leak attributed to the hacker group ShinyHunters, which in recent months has been systematically targeting Salesforce CRM platforms. In June

Members of the Silent Crow group, which claimed responsibility for the late-July cyberattack on Aeroflot, have begun releasing data allegedly stolen from the airline. According to media reports, the leak includes sensitive medical records belonging to pilots and other airline employees. The attack occurred on July 28, 2025, when Aeroflot