A widespread cyber-criminal campaign has compromised legitimate WordPress websites to infect visitors with infostealer malware, threat researchers at Rapid 7 have warned. The global operation has compromised over 250 websites including regional news publications, local business websites and a US… Read More "Compromised WordPress Sites Deliver ClickFix Attacks"
A set of nine cross-tenant vulnerabilities in Google Looker Studio that could have enabled attackers to extract or manipulate sensitive cloud data has been uncovered by cybersecurity researchers. The flaws, collectively named LeakyLooker by Tenable Research, affected the cloud-based business intelligence… Read More "Researchers Uncover ‘LeakyLooker’ Vulnerabilities in Google Looker"
Infosecurity Europe has unveiled a major line-up of keynote speakers for its 2026 conference program, bringing together prominent figures from the military, global cybersecurity, elite sport and intelligence communities. The event will run from 2–4 June at ExCeL London. Industry… Read More "Infosecurity Europe Announces 2026 Keynote Line Up"
Posted by Chrome Root Program, Chrome Security Team Note: Google Chrome communicated its removal of default trust of Chunghwa Telecom and Netlock in the public forum on May 30, 2025. The Chrome Root Program Policy states that Certification Authority (CA)… Read More "Google Online Security Blog: Sustaining Digital Certificate Security"
I recently had, what I thought, was a unique brainwave. (Spoiler alert: it wasn’t, but please read on!) As a marketing leader at ESET UK, part of my role is to communicate how our powerful and comprehensive solutions can be… Read More "What Schrödinger can teach us about cybersecurity"
The French Cybersecurity Agency (ANSSI) has confirmed the decline of known ransomware attacks in 2025, in part due to successful law enforcement operations. The latest edition of the agency’s annual threat report, published on March 11, dives into the range… Read More "France’s Cybersecurity Agency Reports Ransomware Attack Drop in 2025"
Adobe on Saturday released emergency patches for a critical Acrobat and Reader zero-day that has been exploited in the wild for several months. The vulnerability has been assigned the CVE identifier CVE-2026-34621 and a CVSS score of 9.6. According to… Read More "Adobe Patches Reader Zero-Day Exploited for Months"
With the rapid adoption of generative AI, a new wave of threats is emerging across the industry with the aim of manipulating the AI systems themselves. One such emerging attack vector is indirect prompt injections. Unlike direct prompt injections, where… Read More "Mitigating prompt injection attacks with a layered defense strategy"
Ravie LakshmananApr 12, 2026Vulnerability / Endpoint Security Adobe has released emergency updates to fix a critical security flaw in Acrobat Reader that has come under active exploitation in the wild. The vulnerability, assigned the CVE identifier CVE-2026-34621, carries a CVSS score of… Read More "Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621"
Being seen as reliable is good for ‘business’ and ransomware groups care about ‘brand reputation’ just as much as their victims 11 Dec 2025 • , 4 min. read Black Hat Europe 2025 opened with a presentation by Max Smeets… Read More "Reputation is currency – even in the ransomware economy"
