Researchers have uncovered a critical vulnerability in Apache ActiveMQ Classic, a 13-year-old ActiveMQ bug that allows hackers to execute arbitrary commands remotely. This remote code execution flaw, undetected for over a decade, threatens the integrity and security of systems using the message broker. Apache ActiveMQ Classic, a widely adopted tool for facilitating communication between software […]
Anthropic’s Claude Mythos Preview is transforming cybersecurity with its formidable capability to uncover and autonomously exploit zero-day vulnerabilities. Unlike its predecessors, Claude Mythos stands out by autonomously generating complex exploits without explicit programming. During internal benchmarks, it achieved unprecedented success by executing control-flow hijackings on 10 fully patched systems. Its advanced logic has led to […]
Iran-linked hackers vow to renew their cyber efforts against the United States as soon as conditions permit, underscoring the deep integration of cyber warfare in modern military engagements. These threats persist despite a fragile ceasefire, reflecting the unpredictable nature of digital conflict. The hackers’ pledge highlights how cyberattacks have become a crucial element of geopolitical […]
Magento stores face malware threats as hackers embark on a widespread campaign leveraging the platform. The attackers conceal credit card-stealing scripts within a minuscule, pixel-sized Scalable Vector Graphics (SVG) image. This deceptive tactic affects nearly 100 online stores, enabling hidden malicious code to operate undetected. Users remain vulnerable while conducting transactions on compromised sites employing […]
Bitcoin Depot loses millions after hackers breached its systems, stealing $3.665 million in Bitcoin from its wallets. Bitcoin Depot operates one of the largest Bitcoin ATM networks globally. The cyberattack took place last month and has drawn attention to the vulnerabilities in the cybersecurity protocols of major cryptocurrency operators. As the popularity of crypto ATMs […]
U.S. agencies have issued a warning that Iran-linked hackers are actively targeting internet-connected programmable logic controllers (PLCs) in critical infrastructure sectors. The FBI and CISA highlighted these cyber threats in a joint advisory. These attackers focus on Rockwell/Allen-Bradley PLCs, aiming to disrupt essential services such as water, energy, and government systems through manipulation of data […]
An Iran-linked group has launched a sophisticated password-spraying campaign targeting over 300 Microsoft 365 environments in Israel and the UAE, intensifying cybersecurity challenges amid ongoing Middle Eastern conflicts. The campaign, attributed to a threat actor with connections to Iran, executed coordinated attacks in three distinct waves on March 3, March 13, and March 23, 2026. […]
Microsoft warns that a financially motivated threat group, Storm-1175, is exploiting zero-day flaws in internet-facing assets to launch Medusa ransomware attacks. These high-paced intrusions can incapacitate organizations within 24 hours, taking advantage of newly disclosed software vulnerabilities before they are patched. The group targets unpatched “N-day” vulnerabilities and also exploits zero-day flaws, highlighting a sophisticated […]
German police have identified key figures behind the notorious ransomware groups, REvil and GandCrab. The Federal Police in Germany (known as BKA) named two Russian nationals as masterminds behind these cybercrime operations active between 2019 and 2021. The identification marks a significant development in the global fight against cybercrime. These ransomware groups have been responsible […]
A critical ninja forms flaw in the WordPress plugin has exposed approximately 50,000 websites to potential takeover. This vulnerability, identified as CVE-2026-0740, has been assigned a severity score of 9.8, highlighting the urgent need for action from site administrators. Discovered by security researcher Sélim Lanouar, the flaw permits unauthorized file uploads, which can lead to […]
Google plans a crypto shift by setting the goal to fully transition to post-quantum cryptography by 2029. This ambitious move underscores the tech giant’s commitment to enhancing digital security. While functional quantum computers might not emerge soon, Google’s proactive approach to crypto-agility is a significant step. Adapting to future cryptographic challenges is critical for companies […]
The latest 2026 report from SANS warns a skills gap is widening in the cybersecurity field, placing critical infrastructure and operational technology (OT) sectors at significant risk of breaches. The report identifies a growing disparity in the capabilities required to protect vital systems, as well as the resources available to address these gaps. As the […]