One of the most severe issues, tracked as CVE-2025-41250, is an SMTP header injection bug in vCenter. With a CVSSv3 base ...

A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script ...

PwC found that AI security has become a top investment priority in cyber budgets over the next 12 months, ahead of cloud and ...

The NCA warns that house buyers could face losses of over £80,000 from a type of BEC called payment diversion fraud ...

A newly identified cyber espionage group has been targeting government and telecommunications organizations across Africa, ...

AI security was the main focus for acquisitions in September, while Mitsubishi Electric unveiled a $1bn deal to buy OT ...

Tim Capel, ICO interim executive director – regulatory supervision, revealed that the privacy watchdog issued a notice of ...

According to research by Sekoia.io’s Threat Detection & Research (TDR) team, the routers’ APIs were abused to send phishing ...

The Trump administration wants CISA to transition to a “new model” for supporting local government agencies’ cyber strategy ...

At its core, Klopatra is a sophisticated banking Trojan. It enables attackers to seize control of infected devices using ...

The first indirect prompt injection vulnerability affects Gemini Cloud Assist: a tool designed to help users understand ...

Japanese brewery giant Asahi revealed that a cyber-attack had caused a “system failure”, with order and shipment operations ...