Global security desk · updated coverage of threats, exploits & breaches

Articles

Phishing campaign impersonates tax authorities to steal credentials

A new wave of phishing messages is exploiting the authority of tax agencies to trick people into handing over passwords, identity details and payment…

Supply chain attack exposes software vendor trusted by major enterprises

A compromise at a software supplier can turn a routine update into a highly effective intrusion tool. That is the defining concern in the latest supply chain…

How dark web marketplaces rebound after major takedowns

A major law enforcement operation can remove a marketplace overnight, seize servers, freeze cryptocurrency wallets and arrest administrators. Yet the…

Hackers exploit unpatched Microsoft Exchange Server flaw

A critical security defect in on-premises Microsoft Exchange Server is now being weaponised by attackers who are chaining it with known techniques to install…

Critical Buffer Overflow in Open Source Library Triggers Urgent Patching Across Sectors

A security team in Berlin has published details of a remote code execution flaw in a widely used open source parsing library pulled into thousands of…

Healthcare Sector Targeted by New Double Extortion Ransomware

A freshly observed ransomware family is turning its focus on hospitals, clinics, diagnostic laboratories, and medical billing firms, combining file encryption…

Zero-day flaw in widely deployed VPN client risks enterprise exposure

A previously unknown remote code execution flaw in a widely installed virtual private network client has surfaced this week, sending security teams across…