The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of ...

A new Shai-Hulud npm strain and a fake Jackson Maven package show how attackers abuse trusted dependencies to steal secrets ...

China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...

The zero-day exploitations of Ivanti's MDM platform meant unprecedented pwning of 1000s of orgs by a Chinese APT — and ...

Microsoft will enable Teams messaging security by default in January 2026, blocking risky files and malicious links to ...

Secureclaw's Global Perspective For Organizational Leaders. EINPresswire/ -- SecureClaw has recently released its annual Cyber Threat Analysis Report, based on data from 2025, which highlights ...

2025 included a number of monumental threats, from global nation-state attacks to a critical vulnerability under widespread ...

A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.

Cyber defence will need to involve thinking like attackers, anticipating intent rather than just blocking exploits ...

Shai-Hulud 2.0 infected over 12,000 systems and exposed Trust Wallet keys that were used to steal $8.5 million from 2,520 ...

Two former American cybersecurity professionals have pleaded guilty in federal court for their roles in carrying out ...