A new phishing technique dubbed “GhostLink” has emerged. Attackers compromise a user’s account (e.g., Teams or Zoom) and join a […]
New “GhostLink” Phishing Tactic Uses Malicious QR Codes in Video Meetings Read More »
A critical unauthenticated remote code execution (RCE) vulnerability (CVE-2025-8201, CVSS 10.0) in the “JetStream” enterprise data streaming platform is being
Critical “JetStream” Data Platform RCE Flaw (CVE-2025-8201) Actively Exploited Read More »
The U.S. Treasury and SEC issued a joint bulletin warning financial institutions of sophisticated, AI-powered disinformation campaigns. State-sponsored actors are
U.S. Government Warns of AI-Powered Disinformation Targeting Financial Markets Read More »
A critical (CVSS 9.8) authorization flaw in the “Post SMTP” WordPress plugin, active on over 400,000 sites, is being actively
Critical WordPress Plugin “Post SMTP” Flaw Actively Exploited for Site Takeover Read More »
The new “2025 Insider Risk Report” from Cybersecurity Insiders finds that 93% of security leaders say insider threats are as
Report: 93% of Orgs Find Insider Threats as Hard as (or Harder than) External Attacks Read More »
Japanese media giant Nikkei, owner of the Financial Times, has disclosed a data breach impacting over 17,000 employees and business
Media Giant Nikkei Reports Data Breach via Compromised Slack Account Read More »
A critical (CVSS 9.8) vulnerability has been disclosed in the popular “@react-native-community/cli” NPM package, which receives ~2 million weekly downloads.
Critical Flaw in React Native NPM Package (CVE-2025-11953) Exposes Developers Read More »
Google’s November 2025 Android Security Bulletin patches a critical remote code execution (RCE) vulnerability in the Android System component. Tracked
Critical 0-Click RCE Flaw in Android System (CVE-2025-48593) Read More »
In alignment with national security policies, the UAE, in partnership with e& and AWS, has announced the full availability of
UAE Launches Sovereign Cloud to Boost Secure AI Adoption Read More »
Multiple critical vulnerabilities have been disclosed in Google Chrome’s V8 JavaScript engine, including CVE-2025-12036 (RCE) and CVE-2025-12428 (type confusion). These
Critical Google Chrome V8 Vulnerabilities Disclosed Read More »
