Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...
The zero-day exploitations of Ivanti's MDM platform meant unprecedented pwning of 1000s of orgs by a Chinese APT — and ...
Fake AI answers are being weaponized to trick Mac users into installing stealthy malware through search results they trust.
A new Shai-Hulud npm strain and a fake Jackson Maven package show how attackers abuse trusted dependencies to steal secrets ...
The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...
Two former American cybersecurity professionals have pleaded guilty in federal court for their roles in carrying out ...
A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.
2025 included a number of monumental threats, from global nation-state attacks to a critical vulnerability under widespread ...
The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of ...
Expert Consumers has recognized Webroot as the leading tool for real-time malware defense in its 2025 malware scanner evaluation. The recognition comes as cybersecurity threats continue to escalate in ...
Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and ...
China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.