Support

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the …

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more…

The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare veri…

Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vuln…

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execut…

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time…

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab comm…

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers withou…

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisc…

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositori…

UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.…

Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.…

Owners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience.…

A statement from Ollie Whitehouse, Chief Technology Officer at the NCSC, on AI security following recent incidents.…

GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phi…

Introduction
…

On Friday, Xavier talked about the newly introduced HTTP Query method. This new method was introduced to allow "GET" requests that include …

At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not…