A critical security vulnerability in SAP’s NetWeaver Visual Composer, tracked as CVE-2025-31324, has been actively exploited by ransomware groups and Chinese state-sponsored actors, allowing for unauthorized file uploads and potential Remote Code Execution.
View full story…

As cyber threats become more sophisticated, Chief Information Security Officers must adapt their strategies to protect both businesses and executives while fostering a culture of cyber resilience.
View full story…

In 2024, newly discovered vulnerabilities in Linux and macOS surged by 61%, with Linux vulnerabilities increasing by 967% and exploited vulnerabilities nearly doubling, highlighting a significant escalation in cybersecurity risks.
View full story…

The ransomware ecosystem has become increasingly fragmented and mistrustful among cybercriminal groups, leading to a more unpredictable threat environment for organizations worldwide.
View full story…

Coinbase has launched a $20 million reward program for information leading to the identification and arrest of cybercriminals who breached its customer support system, affecting less than 1% of its users.
View full story…

Websites must implement robust security measures to safeguard against online threats and proxy abuse, which can lead to fraudulent activities, security breaches, and service disruptions.
View full story…

Marks & Spencer suffered a significant ransomware attack attributed to the hacking group Scattered Spider, resulting in operational disruptions, financial losses, and compromised customer data.
View full story…

Microsoft’s May 2025 Patch Tuesday updates resolve 72 vulnerabilities, including five actively exploited zero-day flaws that pose significant security risks across various Microsoft products.
View full story…

The MITRE CVE program, crucial for vulnerability management, received an 11-month contract extension from CISA after concerns over its funding, while the European agency ENISA launched the EUVD to enhance vulnerability tracking and reduce reliance on a single source.
View full story…

A recent VikingCloud report reveals that one in three small and medium-sized businesses experienced a cyber attack in the past year, with many citing inadequate security measures and the growing threat of ransomware as significant risks to their operations.
View full story…

Chihuahua Stealer is a newly identified infostealer malware that targets Windows systems, utilizing advanced techniques for stealth and data theft via obfuscated PowerShell scripts delivered through malicious Google Drive documents.
View full story…

Device Trust from Android Enterprise provides a comprehensive security solution for managed and unmanaged Android devices, enabling organizations to enforce access policies and mitigate mobile threats in BYOD environments through real-time trust signal assessments and seamless integration with existing security tools.
View full story…

Fortinet has revealed a critical zero-day remote code execution vulnerability, CVE-2025-32756, that is actively exploited by attackers to compromise multiple Fortinet products, including FortiVoice and FortiOS.
View full story…