In a new bulletin, Microsoft has criticized security researchers for publicly reporting vulnerabilities in the company’s products before patches were available and without prior notice. These “uncoordinated disclosures put our customers at unnecessary risk,” the tech giant said. Six Microsoft… Read More "Microsoft Condemns “Uncoordinated” Zero Day Disclosures"
Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay safe. 27 May 2026 • , 5 min. read For better or worse, chatbots are… Read More "What to consider before asking an AI chatbot for health advice"
Most malicious open source packages have moved beyond misspelling popular project names, instead disguising themselves as plausible plugins, configs and helpers that fit naturally into a developer’s workflow. That is the central finding of new analysis by Sonatype, which examined… Read More "Attackers Move Past Typosquatting to Realistic Package Impersonation"
ESET researchers have identified new MuddyWater activity primarily targeting organizations in Israel, with one confirmed target in Egypt. MuddyWater, also referred to as Mango Sandstorm or TA450, is an Iran-aligned cyberespionage group known for its persistent targeting of government and… Read More "MuddyWater: Snakes by the riverbank"
A new variant of the NGate malware family has been identified, leveraging a trojanized Android application to capture payment card data and PINs. According to research published by ESET on April 21, the new campaign has replaced earlier tooling with a modified version… Read More "Trojanized Android App Fuels New Wave of NFC Fraud"
Swati KhandelwalJun 12, 2026Linux / Network Security Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as… Read More "China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade"
“If Defender offline scan was initiated in the victim machine at any point then there is no need to login, the machine is automatically vulnerable,” the researcher, who goes online by the name Nightmare Eclipse or Chaotic Eclipse, said in… Read More "GreatXML zero-day BitLocker bypass doesn’t seem to work, yet"
Interpreting the vast cybersecurity vendor landscape through the lens of industry analysts and testing authorities can immensely enhance your cyber-resilience. 10 Dec 2025 • , 7 min. read Skip to the next paragraph if your eyes glaze over at the… Read More "How to harness today’s diverse analyst and tester landscape to paint a security masterpiece"
The education sector has found itself in the crosshairs of a ShinyHunters “pay or leak” extortion campaign following the compromise of Instructure, the company behind the Canvas Learning Management System. The original compromise of Instructure occurred on April 25 with… Read More "ShinyHunters Escalates Canvas Extortion – Infosecurity Magazine"
Ravie LakshmananJun 12, 2026Cybercrime / Artificial Intelligence Google on Friday said it’s pursuing legal action against a Chinese cybercrime network, accusing it of using its Gemini artificial intelligence (AI) agent to send phishing text messages targeting Americans. The network is… Read More "Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing"
