Russian hacking group APT28 has been exploiting vulnerable internet routers to redirect traffic through attacker-controlled servers and steal credentials from targeted organizations, the UK government has warned. In a new advisory published on April 7, the UK’s National Cyber Security… Read More "Russian APT28 Hackers Hijack Routers to Steal Credentials"
Cramming for finals is bad enough without the platform you use to do your schoolwork suddenly shutting down. Unfortunately for countless students across the US, that’s exactly what they faced on Thursday after Canvas went into “maintenance mode” following a… Read More "Hackable Robot Lawn Mower Unlocks a New Nightmare"
The Oncology Institute says a previously disclosed cybersecurity incident has been confirmed to impact patient information. The Oncology Institute (TOI) is an oncology provider founded in 2007 that delivers specialized cancer care through a network of over 100 clinics across… Read More "Oncology Institute Discloses Data Breach"
Ravie LakshmananMay 25, 2026Vulnerability / Web Security Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks. According to QiAnXin XLab, the activity involves the… Read More "Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks"
“What developers are missing is early feedback at the point where the dependency decision is made,” Sonu Kapoor, creator and maintainer of the project, told CSO. According to Kapoor, traditional CI-centric workflows often disconnect developers from the dependency choices that… Read More "As AI speeds coding, CVE Lite CLI keeps security deliberately AI-free"
How a fast-growing scam is tricking WhatsApp users into revealing their most sensitive financial and other data 05 Nov 2025 • , 4 min. read Scams and other threats that are doing the rounds on messaging apps like WhatsApp are… Read More "The WhatsApp screen-sharing scam you didn’t see coming"
Cybercriminals and fraudsters have dedicated entire ecosystems to scamming and stealing from Formula 1 fans, a new report has warned. According to the Bitdefender Cybersecurity Grand Prix Fan Threat Index, the growing global digital ecosystem around motorsport makes it an… Read More "Fake Streams, Counterfeit Merch & Scams: How Fraudsters Target F1 Fans"
“Nation state issues are very serious and very real, but criminal actors still make up the vast majority of incidents that organizations deal with and many of those incidents are quite serious,” Hultquist adds. “Zero-day use by criminal actors has… Read More "The AI Era Is Creating a Bug Hunting Arms Race"
Anthropic says its Claude Mythos model discovered thousands of severe vulnerabilities across more than 1,000 open source software (OSS) projects. According to the AI giant, Mythos Preview has identified more than 23,000 potential vulnerabilities. Of these, 1,900 have been reviewed… Read More "Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects"
ESET Research Threat Reports An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2025 and Q3 2025 06 Nov 2025 • , 4 min. read ESET APT Activity Report Q2 2025–Q3 2025… Read More "ESET APT Activity Report Q2 2025–Q3 2025"
