⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article offers five security checks for users to perform before downloading apps created with AI assistance, given the increased ease of software development. The checks help identify potentially risky apps that could expose personal data or contain malware.
This article examines how nation-state operators exploit the trust assumptions in legacy telecom protocols such as SS7 and BGP to infiltrate carriers and remain undetected for extended periods. It details the architectural weaknesses of SS7, the ease of gaining access, and the consequences including location tracking and interception, while noting that newer generations like 4G and 5G remain vulnerable.
Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets.
A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide material support to Ukraine.
A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could not choose whose data they got, according to Cloudflare .
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway that could allow unrestricted file upload and lead to remote code execution.