A new espionage implant, HollowGraph, hides stolen files and operator commands in fake Microsoft 365 calendar events dated 2050, leveraging legitimate Microsoft Graph API traffic to evade detection.
A recently disclosed ServiceNow AI Platform vulnerability is now being actively exploited by attackers, threat researchers warn.
A new critical vulnerability in NGINX allows remote code execution and server crashes via crafted HTTP requests, prompting urgent updates.
A wave of sophisticated malware campaigns is reshaping cyber threats, leveraging AI, open-source compromises, and IoT botnets to target developers and users.
A newly disclosed exploit chain allows unauthenticated attackers to seize control of WordPress sites running versions 6.9.x and 7.0.x, prompting urgent 7.0.2 and 6.9.5 updates.
Users should update to 7-Zip 26.02 immediately to block a remote code execution flaw triggered by malicious archives.
Microsoft reports a sharp increase in ACR Stealer malware targeting enterprise customers, aiming to steal browser data and documents.
A newly disclosed WordPress core vulnerability allows unauthenticated attackers to execute code on affected sites, impacting versions 6.9 and 7.0.
The Big Four firm Ernst & Young is investigating a data breach linked to a compromised third-party IT support platform used by its tax teams.
The global professional services firm Ernst & Young disclosed a data breach after attackers compromised a third-party support ticket system used by its IT staff.
