During a recent investigation into AMOS InfoStealer, Kroll Threat Intelligence has discovered a troubling new delivery vector that leverages the growing trust users place in AI tools. In this case, at...

CVE-2025-55182 is a critical unauthenticated RCE flaw in React Server Components with a CVSS score of 10.

404 Media has filed a lawsuit against ICE for access to its contract with Paragon, a company that sells powerful spyware for breaking into phones and accessing encrypted messaging apps.

CVE-2025-53770 and CVE-2025-53771 are vulnerabilities in on-premise Microsoft SharePoint Servers that evolved from previously patched flaws, allowing unauthenticated remote code execution through adva...

Experts told CyberScoop the research 'doesn’t pass a sniff test' and detracts from needed conversations around credential abuse and information stealers.

A group tied to Iran’s Revolutionary Guard targeted the capital of Tirana in retaliation for Albania hosting around 3,000 Iranian dissidents.

Discover how the FIN6 cybercrime group, also known as Skeleton Spider, leverages trusted cloud services like AWS to deliver stealthy malware through fake job applications and resume-themed phishing ca...

This report uncovers a set of related threat clusters linked to PurpleHaze and ShadowPad operators targeting organizations, including cybersecurity vendors.

The Department of Agriculture is demanding sensitive data from states about more than 40 million food stamp recipients, as DOGE is amassing data for immigration enforcement.

The attempted extortion has so far targeted schools in Canada and North Carolina.

What We Hunted, Learned, and Loved This Month

Why the timing and transparency of messaging can make or break your incident response

Chris Krebs, the cybersecurity official from the first Trump administration who was fired after saying the 2020 election wasn’t stolen, vowed to fight back against a White House investigation.

Cybersecurity professionals and the infosec community have essential roles to play in protecting our democracy, securing our elections, and building, testing, and safeguarding government infrastructur...

People say they are intimidated by online attacks from the president, concerned about harm to their businesses or worried about the safety of their families.

The cybersecurity industry has gone mostly quiet after President Donald Trump took action against one of its prominent members.

A senior Chinese official linked intrusions to escalating U.S. support for Taiwan.

RESTORING TRUST IN GOVERNMENT: Today, President Donald J. Trump signed a Presidential Memorandum revoking any active security clearance held by Chris

Analyse the ClickFix tactic and related campaigns. Uncover a ClickFix campaign impersonating Google Meet and cybercrime infrastructure.

STRIKE reveals Lazarus Group's new tactic: embedding malware in trusted apps for stealthy, widespread attacks and long-term access.

Cybersecurity is a fast-growing, dynamic field and SANS mission is to equip you with the skills you need to succeed in the industry. This free live-online event brings together leading experts prepare...

We can anticipate a growing number of emerging vulnerabilities in the near future, emphasizing the need for an effective prioritization strategy.