AWS patched an EC2 SSM Agent flaw on March 5, 2025, preventing privilege escalation via plugin ID path traversal.

Fortinet has released security updates to address a critical security flaw impacting FortiSwitch that could permit an ...

A recently disclosed critical security flaw impacting CrushFTP has been added by the U.S. Cybersecurity and Infrastructure ...

Google patched 62 flaws, including two actively exploited kernel bugs, closing exploit chains used in Android attacks.

CERT-UA identifies GIFTEDCROOK malware stealing browser data via phishing Excel files in attacks targeting Ukrainian ...

Fast flux exploits DNS gaps to evade takedowns since 2007, enabling resilient malware and phishing operations.

This week, we trace how simple oversights turn into major breaches — and the silent threats most companies still ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

PoisonSeed exploits CRM credentials to spread cryptocurrency seed phrase attacks, risking major wallet compromises.

EncryptHub, also tracked under the monikers LARVA-208 and Water Gamayun, was spotlighted in mid-2024 as part of a campaign ...

North Korean actors used 11 npm packages downloaded 5,600+ times to spread BeaverTail malware, expanding attacks to Bitbucket ...

GitHub Copilot adoption rose 27% (2023–2024), causing a 40% spike in secret leaks, widening enterprise attack surfaces.