Google just patched the fourth Chrome zero-day vulnerability of 2026, a sobering reminder that attackers are relentlessly targeting the browser ecosystem with increasingly sophisticated threats. This latest emergency fix highlights the urgent need for users to stay vigilant and up-to-date with the latest security patches.
A recent breach of the popular Axios npm package has exposed a critical supply chain vulnerability: hackers hijacked a maintainer account to spread remote access trojans, putting thousands of applications and developers at risk.
Imagine your entire online life being stolen and sold for just a few hundred dollars - that's the harsh reality with Phantom Stealer, a powerful and stealthy tool that's making it easy for cybercriminals to get their hands on your sensitive information. This sophisticated .NET-based stealer can harvest everything from login credentials to payment card details, putting your digital identity at risk.
As Iran's missile strikes leave destruction in their wake, a stealthier threat is emerging: coordinated password-spraying attacks targeting Microsoft 365 accounts of municipal authorities in the region. This sinister campaign seems to be exploiting the chaos, striking when defenses are down.
Employee data breaches have reached a seven-year high, exposing a harsh reality: even the most basic security measures are being overlooked, putting sensitive employee information at risk. Can organizations protect their most valuable asset - their employees' personal data - from these preventable breaches?
As AI-generated deepfakes become increasingly sophisticated, the risk of being deceived has never been higher - and it's clear that Big Tech is struggling to keep up. With misinformation spreading like a virus, it's time for tech giants to take responsibility and work towards effective countermeasures.
The UK has taken a bold stance against crypto crime by sanctioning Xinbi, a major Chinese marketplace accused of fueling Southeast Asia's alarming scam surge. Can this move spark a turning point in the battle against illicit finance in the rapidly evolving world of digital currencies?
The US and UK are racing against time to outsmart a growing maritime threat: underwater attack drones that can devastate ships, harbors, and critical infrastructure. With a joint call for tech tenders and a tight deadline of April 3, they're on a mission to find cutting-edge solutions before it's too late.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
China's latest cyber campaign, targeting Southeast Asia in 2025, exposes the alarming vulnerabilities of even the most secure digital fortresses, with three China-linked threat clusters deploying sophisticated malware to gather intelligence and exert influence. This brazen move raises urgent concerns about the future of cyber espionage and the safety of our digital lives.
A new wave of malware has struck, targeting Iran with a destructive wiper attack that wipes data from infected systems, blurring the lines between cybercrime and cyberwarfare. This brazen threat, dubbed CanisterWorm, exploits weak cloud security to spread its digital destruction.
The ShieldGuard Chrome extension, sold as a crypto safeguard, quietly stole private keys and drained wallets — a stark reminder that a browser helper can easily become a thief. Find out how investigators tore it down and what steps to take now to protect your assets.
Good news from France: a stunning 35% drop in ransom payments in 2025 shows ransomware’s profit model is faltering — but small businesses still bear the brunt of attacks.
When millions of BadeSaba Calendar users woke to cryptic Help has arrived alerts amid explosions, a common prayer‑time app suddenly became the center of speculation about a coordinated info operation. It’s a vivid reminder that everyday apps can be hijacked to shape public perception in moments of crisis.
A former Trenchant manager who oversaw offensive cyber tools at L3Harris was sentenced to seven years after allegedly selling zero‑day exploits and internal tooling to a Russian buyer for about $1.3 million. It’s a stark reminder of how insider access can turn trusted national‑security capabilities into dangerous weapons.
When hospitals open their doors, their networks shouldnt open to extortion — but a surge in Medusa ransomware tied to North Koreas Lazarus Group is forcing technologists, health‑care leaders and policymakers to decide how to lock them. These attacks — a blend of state‑grade tools and criminal tactics — risk disrupted care, delayed diagnoses and real harm to patients.
Think insider incidents are minor? Think again—the cost of insider incidents can skyrocket to nearly $20 million, and this post shows where that money goes and how to stop the bleed.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
“If a machine can be taught to mimic a mind, who owns the idea?” That question has moved from philosophy into the courtroom and the server room as allegations swirl…
Stunning new findings reveal a Python-based malware toolkit—layered obfuscation, throwaway infrastructure and automated workflows—that powered large-scale bank fraud. Now banks face a stark choice: tighten controls and risk customer friction, or live with stealthy theft that slowly erodes trust.
Investigators uncovered a new strain of Python malware engineered to obfuscate itself and vanish after a single use, leaving almost no forensic trace. Its mix of disposable infrastructure and rapid, targeted strikes means security teams must move beyond signature-based detection or risk letting fraud slip through the cracks.
A fraud probe exposed a deliberately obfuscated Python implant — supported by disposable command‑and‑control infrastructure — that turns familiar scripts into a stealthy, hard‑to‑detect fraud weapon.
When a suppliers lights go out, factories can stop — and that’s the risk now that Advantest, a leading maker of semiconductor test gear, has confirmed a critical ransomware attack. Customers, regulators and supply‑chain teams are scrambling for answers as investigators work to contain the breach and reveal its true impact.
Advantest — the company behind the test gear that keeps chips flowing into our phones and cars — has activated incident response after a ransomware-related cybersecurity incident. How quickly it contains the breach will decide whether this becomes a brief disruption or a far-reaching supply-chain crisis.
Advantest has reported a cybersecurity incident — a costly ransomware attack that could ripple across global semiconductor supply chains. With few details released as incident response continues, customers and nations face the prospect of production delays, lost revenue and strategic headaches.
What if the generative AI tools meant to strengthen public debate are quietly corroding democracy? Cheap, hyper‑local, hard‑to‑trace influence campaigns are blurring the line between human and machine speech, slipping past platform defenses and eroding the shared facts our institutions depend on.