The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper 23 Jan 2026 • , 2 min. read UPDATE (January 30th, 2026): For a technical breakdown of the incident affecting a company in Poland’s energy sector,… Read More "Sandworm behind cyberattack on Poland’s power grid in late 2025"
The number of zero-day vulnerabilities uncovered in enterprise software and appliances reached an all-time high last year, analysis by Google Threat Intelligence Group (GTIG) has warned. In the report, released on March 5, GTIG said it tracked 90 zero-day vulnerabilities… Read More "Zero‑Day Attacks on Enterprise Software Reach Record High"
Seven vulnerabilities have been patched with the latest OpenSSL updates, including a flaw that can allow an attacker to obtain sensitive data. The data leakage issue, tracked as CVE-2026-31790 and rated ‘moderate severity’, affects applications that use RSASVE key encapsulation… Read More "Data Leakage Vulnerability Patched in OpenSSL"
Ravie LakshmananApr 08, 2026Vulnerability / Cloud Security The Russian threat actor known as APT28 (aka Forest Blizzard and Pawn Storm) has been linked to a fresh spear-phishing campaign targeting Ukraine and its allies to deploy a previously undocumented malware suite codenamed PRISMEX.… Read More "APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies"
“The real-world impact is profound. Attackers can intercept credentials, reroute traffic to malicious sites, or inject malware, all without ever breaching the corporate firewall. This can lead to data breaches, financial theft, or even ransomware incidents originating from an employee’s… Read More "Forest Blizzard leverages router compromises to launch AiTM attacks, target Outlook sessions"
Has your inbox recently been deluged with unwanted and even outright malicious messages? Here are 10 possible reasons – and how to stem the tide. 27 Jan 2026 • , 5 min. read For all our modern obsession with social… Read More "Drowning in spam or scam emails lately? Here’s why"
Several US companies have been targeted by Iranian hacking group MuddyWater in a new campaign that started in early February and has continued after the US and Israeli military strikes on Iran. The campaign was detected by the Threat Hunter… Read More "Iran’s MuddyWater Hackers Hit US Firms with New ‘Dindoor’ Backdoor"
A remote code execution (RCE) vulnerability that lurked in Apache ActiveMQ Classic for 13 years could be chained with an older flaw to bypass authentication, Horizon3.ai reports. An open source messaging and Integration Patterns server, Apache ActiveMQ acts as a… Read More "RCE Bug Lurked in Apache ActiveMQ Classic for 13 Years"
As the US and Iran agreed to a ceasefire on Tuesday, six US federal agencies have warned that Iran-affiliated threat actors have compromised internet-exposed programmable logic controllers at critical infrastructure facilities in the US. The attacks, which the agencies linked… Read More "Iran‑linked PLC attacks cause real‑world disruption at critical US infra sites"
It’s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy. 10 Feb 2026 • , 5 min. read To misquote Benjamin Franklin, nothing is certain in this world except for… Read More "Top IRS scams to look out for in 2026"
