GhostAction Attack Targets 30,000 GitHub Repositories in New Credential Theft Wave
The GhostAction credential-theft campaign has intensified, targeting more than 30,000 repositories associated with around 3,000 users and organizations on GitHub.
Microsoft Fixes Windows 11 Black Screen and Explorer Crash Issues
Microsoft has fixed a known Windows 11 issue that caused black screens, desktop loading problems, and Windows Explorer crashes after installing updates released since August 2026.
Cisco Patches Actively Exploited Email Gateway Zero-Day Allowing Root Access
Cisco has patched a zero-day vulnerability in its Secure Email Gateway (SEG) that allows unauthenticated remote attackers to execute commands with root privileges on vulnerable systems.
Microsoft and Japan Disrupt Scam Network Behind 1 Billion Phishing Messages
Microsoft and Japanese authorities have disrupted a global phishing network behind more than one billion scam messages, disabling 20,000 accounts and blocking 100,000 fraudulent domains.
Apple Becomes a $5 Trillion Company After Record Market Close
Apple has become a $5 trillion company after its market capitalization closed above the milestone for the first time, according to The Wall Street Journal.
Fake WhatsApp Wedding Invitation Scam: How Android Malware Steals Your Money
Fake wedding invitations on WhatsApp can disguise malicious Android apps. Learn how the scam works, how to recognise suspicious APK files and what to do if you install one.
Millions of Exposed Passwords Found in Publicly Accessible Database Linked to Indian AI Company
A publicly accessible database linked to an Indian AI company reportedly exposed millions of records from previous data breaches, including email addresses, usernames and passwords. The database was restricted following responsible disclosure.
OpenAI Engineer Arrested Over Alleged Hidden Recording Device in Executive Meeting Room
A Saudi national who worked as an engineer at OpenAI has been arrested in the United States for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly capture sensitive conversations.
Microsoft Fixes Record 1,411 Security Flaws in October 2026 Patch Tuesday
Microsoft has released its October 2026 Patch Tuesday security updates, addressing a record-breaking 1,411 vulnerabilities across its products, including one actively exploited zero-day and two publicly disclosed zero-day flaws.
North Korean IT Workers Infiltrate at Least 70 U.S. Companies, DOJ Says
North Korean operatives have infiltrated at least 70 U.S.-based companies by posing as legitimate employees and using stolen American identities, according to the U.S. Department of Justice (DOJ).
UK Man Jailed for Stealing £200,000 in Crypto Through SIM-Swapping Fraud
A 25-year-old man in the United Kingdom has been sentenced to two and a half years in prison for stealing nearly £200,000 ($265,000) worth of cryptocurrency through SIM-swapping fraud.
Critical Bricksforge WordPress Flaw Exploited, CVSS 10.0 Bug Allows Remote Code Execution
A critical Bricksforge WordPress vulnerability with a CVSS score of 10.0 is being actively exploited, allowing unauthenticated attackers to execute PHP code on vulnerable websites.
AI-Powered Cyberattacks Target WordPress Sites and Critical Infrastructure
Cybersecurity researchers have uncovered two cybercrime operations using artificial intelligence (AI) to automate attacks, compromise enterprise networks, steal sensitive data, and support financial fraud.
Loading
