Latest Cybersecurity News

Research Hub Bridges Cybersecurity Gap for Under-Resourced Organizations

Dark Reading

Research Hub Bridges Cybersecurity Gap for Under-Resourced Organizations

The UC Berkeley Center for Long-Term Cybersecurity (CLTC) offers tools and support to schools, local governments, and non-profits as they defend themselves against a growing volume of cyberattacks.

Dark Reading2d ago1m4

DAEMON Tools trojanized in supply-chain attack to deploy backdoor

BleepingComputer2d ago3m5

DAEMON Tools trojanized in supply-chain attack to deploy backdoor

Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of systems that downloaded the product from the official website.

Why Security Leadership Makes or Breaks a Pen Test

Dark Reading

Why Security Leadership Makes or Breaks a Pen Test

Well-run security drills go beyond checking audit boxes to identify and address trouble spots. Effective leaders can ensure proper scope, access, and follow-through, but it’s not easy.

Dark Reading2d ago1m4

Student hacked Taiwan high-speed rail to trigger emergency brakes

BleepingComputer2d ago3m4

Student hacked Taiwan high-speed rail to trigger emergency brakes

A 23-year-old university student in Taiwan was arrested for interfering with the TETRA communication system used by the country's high-speed railway network (THSR).

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

The Hacker News

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

Apache fixes CVE-2026-23918 in HTTP/2; double-free flaw enables DoS and RCE, impacting version 2.4.66 users.

The Hacker News2d ago3m4

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

The Hacker News

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky. "These installers are distributed from the legitimate website of DAEMON Tools and are signed with digital certificates belongin...

The Hacker News2d ago1m4

Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk

Dark Reading

Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk

A proof-of-concept exploit (PoC) shows how someone with admin privileges can exploit the issue to steal passwords, and thus use them to engage in further malicious activity.

Dark Reading2d ago1m4

Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations

SecurityWeek

Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations

The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.

SecurityWeek2d ago3m4

FTC to ban data broker Kochava from selling Americans’ location data

BleepingComputer2d ago3m4

FTC to ban data broker Kochava from selling Americans’ location data

The FTC will ban data broker Kochava and its subsidiary, Collective Data Solutions (CDS), from selling location data without consumers' explicit consent to settle charges alleging that it sold precise geolocation data collected from hundreds of millions of mobile devices.

China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions

The Hacker News

China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions

UAT-8302 targets governments since 2024 using shared China-linked malware, enabling persistent access and cross-group cyber operations.

The Hacker News3d ago3m4

The EOL Blind Spot in Your CVE Feed: What SCA Tools Don't Check.

BleepingComputer3d ago7m4

The EOL Blind Spot in Your CVE Feed: What SCA Tools Don't Check.

Critical vulnerabilities can exist in open source software your scanners don't check. HeroDevs reveals how EOL software creates blind spots in CVE feeds and SCA tools, and how you can receive a free end-of-life scan for your projects.

The EOL Blind Spot in Your CVE Feed: What SCA Tools Miss