A large share of UK employees have sold their corporate credentials over the past year, exposing their organization to cyber and financial crime, according to Cifas. The non-profit fraud prevention service revealed the findings in its latest Workplace Fraud Trends… Read More "One in Eight Workers Has Sold Their Corporate Logins"
Government, scientific, manufacturing, and retail organizations have been targeted with a sophisticated backdoor in an ongoing supply chain attack involving the Daemon Tools disk imaging software, Kaspersky reports. As part of the attack, Chinese-speaking attackers apparently injected malicious code into… Read More "Government, Scientific Entities Hit via Daemon Tools Supply Chain Attack"
Ravie LakshmananMay 06, 2026Vulnerability / Network Security Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked as CVE-2026-0300, has been described as… Read More "Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution"
ESET researchers uncovered a multiplatform supply-chain attack by North Korea-aligned APT group ScarCruft, targeting the Yanbian region in China – home to ethnic Koreans and a crossing point for North Korean refugees and defectors. In the attack, probably ongoing since… Read More "ScarCruft compromises gaming platform in a supply-chain attack"
A credential theft campaign that targeted C-suite executives and senior personnel at major global organizations from November 2025 to March 2026 has been uncovered by researchers at Abnormal. They have detailed a previously undocumented phishing-as-a-service (PhaaS) platform called Venom that… Read More "New Phishing Platform Used in Credential Theft Campaigns"
Starting this month, Oracle is supplementing the quarterly Critical Patch Update (CPU) fixes with monthly security releases focused on high-priority vulnerabilities. The first monthly Critical Security Patch Update (CSPU) will roll out on May 28, addressing critical-severity vulnerabilities in the… Read More "Oracle Debuts Monthly Critical Security Patch Updates"
In early February, prior to the start of the 2026 conflict in the Middle East, the United Arab Emirates saw anywhere from 90,000 to 200,000 breach attempts every day. Following the opening of military operations by Israel and the US… Read More "Middle East Cyber Battle Field Broadens — Especially in UAE"
A sanctioned cryptocurrency exchange has claimed that Western intelligence agencies are to blame for a targeted attack last week which led to the theft of one billion rubles ($13.2m) from Russian customers. Kyrgyzstan-based Grinex is believed to be the successor… Read More "Crypto Exchange Grinex Blames Western Spies for $13m Theft"
Palo Alto Networks is working on patches for a critical PAN-OS zero-day that has been exploited to hack some of the company’s firewall models. Tracked as CVE-2026-0300, the vulnerability has been described as a buffer overflow affecting the User-ID Authentication… Read More "Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls"
The UK’s National Cyber Security Centre (NCSC) has shared details of an ongoing coordinated plan to improve cyber resilience in the National Health Service (NHS). Over the past 18 months, government and industry organizations have deepened their collaboration to reduce… Read More "NCSC Outlines Coordinated Plan to Boost NHS Cyber Resilience"
