Joomla SEO Spam Injector: Obfuscated PHP Backdoor Hijacking Site Visitors
Learn how attackers compromise Joomla sites with obfuscated PHP loaders to inject SEO spam, cloak pages, and damage search visibility.
New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges
A researcher known as "Chaotic Eclipse" has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed "RedSun," in the past two weeks, protesting how the company works with cybersecurity researchers.
European police email 75,000 people asking them to stop DDoS attacks
Europol coordinated an operation against for-hire distributed denial-of-service (DDoS) services, including the arrest of four people and the takedown of 53 domains.
Foxit, LibRaw vulnerabilities
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed one Foxit Reader vulnerability, and six LibRaw file reader vulnerabilities.
The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy.
For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always pos
The Q1 vulnerability pulse
Thor provides an overview of the Q1 2026 vulnerability statistics, highlighting key trends in legacy CVEs and the evolving impact of AI on the threat landscape.
Hackers exploit Marimo flaw to deploy NKAbuse malware from Hugging Face
Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware hosted on Hugging Face Spaces.
Two Americans sentenced for helping North Korea steal $5 million in fake IT worker scheme
The U.S. Department of Justice announced that two Americans were sentenced to years in prison for helping the North Korean government place fake IT workers in U.S. companies.
New Jersey men given lengthy sentences for running North Korean laptop farms
Google expands Gemini AI use to fight malicious ads on its platform
Google says it is increasingly using its Gemini AI models to detect and block harmful ads on its advertising platforms, as scammers and threat actors continue to evolve their tactics to evade detection.
Google colpisce azienda cinese delle reti proxy: è collegata ad arma informatica di massa
L'intervento di Google, che ha rimosso decine di domini riconducibili a Ipidea, società cinese operante nel settore dei servizi proxy residenziali, si fonda su elementi tecnici e legali specifici. Il nodo centrale della questione riguarda le modalità attraverso cui i dispositivi vengono inclusi nelle reti proxy
Dall’attacco all’analisi forense: come investigare step by step una compromissione APT
L’analisi forense completa di un attacco APT può aiutare l’azienda a comprendere i punti deboli della propria infrastruttura e uscire dall’incubo del cosiddetto APTNightmare. Ecco la guida pratica per analizzare la macchina del CEO in seguito a un attacco mirato
Most "AI SOCs" Are Just Faster Triage. That's Not Enough.
AI-powered SOC tools promise automation, but most only speed up triage instead of reducing real workload. Tines shows how real gains come from end-to-end workflows that execute actions across systems, not just summarize alerts.
New ATHR vishing platform uses AI voice agents for automated attacks
A new cybercrime platform called ATHR can harvest credentials via fully automated voice phishing attacks that use both human operators and AI agents for the social engineering phase.
L’orizzonte quantistico: la difesa AI-on-AI non è più un problema del futuro
C'è un nuovo campo di battaglia quando l'AI attacca l'AI. Ecco perché non bisogna aspettare che il primo incidente quantistico significativo faccia notizia, per cominciare a muoversi
Cargo thieving hackers running sophisticated remote access campaigns, researchers find
From APT28 to RePythonNET: automating .NET malware analysis
From APT28 to RePythonNET: automating .NET malware analysis
Cisco says critical Webex Services flaw requires customer action
Cisco has released security updates to patch four critical vulnerabilities, including a fixed improper certificate validation flaw in the company's cloud-based Webex Services platform that requires further customer action.
Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware
The Week in Vulnerabilities: Azure AI, Spring AI, Fortinet, and Critical ICS Exposure
Cyble’s weekly vulnerability report tracked 1,431 vulnerabilities and 6 ICS flaws last week. Know more...
BlobPhish: The Phantom Phishing Campaign Hiding in Browser Memory
BlobPhish hides phishing pages in browser memory, evading detection. Learn risks and how to protect your business.
Data breach at edtech giant McGraw Hill affects 13.5 million accounts
The ShinyHunters extortion group has leaked data from 13.5 million McGraw Hill user accounts, stolen after breaching the company's Salesforce environment earlier this month.
From APT28 to RePythonNET: automating .NET malware analysis
More than pretty pictures: Wendy Bishop on visual storytelling in tech
Wendy shares the unique challenges and rewards of bridging the gap between artistic expression and highly technical research.
PowMix botnet targets Czech workforce
Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call “PowMix.”
Two U.S. Nationals Sentenced in $5M North Korea IT Worker Scheme
Authorities continue to investigate the broader North Korea IT worker scheme, with several individuals still at large.
“I’m Just Scared”: Teen Hacker Jailed After Massive U.S. School Data Breach
Hacker Matthew Lane sentenced after PowerSchool breach exposed 70M records.
EHDS, il Comitato UE per lo spazio comune dei dati sanitari è operativo: lo stato dell’arte
L’EHDS, lo Spazio europeo dei dati sanitari, è forse il più ampio progetto normativo europeo che viene costruito in modo (parzialmente) partecipativo in tempo reale con l’obiettivo di costruire la prima architettura comune dei dati sanitari UE, a fini di ricerca e condivisione per fini di cura. I punti salienti
Two U.S. Nationals Sentenced in $5M North Korea IT Worker Scheme
Authorities continue to investigate the broader North Korea IT worker scheme, with several individuals still at large.
US nationals behind DPRK IT worker 'laptop farm' sent to prison
Two U.S. nationals have been sent to prison for helping North Korean remote information technology (IT) workers to pose as U.S. residents and get hired by over 100 companies across the country, including many Fortune 500 firms.
March 2026 Cyber Attacks Statistics
After the cyber attacks timelines, it’s time to publish the statistics for March 2026 where I collected and analyzed 282 events: a sharp increase compared to the 176 events of the previous month. I…