A serious supply-chain attack has been uncovered on the Open VSX extension registry, a platform widely used by developers to download and manage coding extensions. In this incident, attackers compromised a legitimate developer account and used it to publish malicious updates. The attack relied on abusing existing trust rather than exploiting the platform itself. This … Continued
SmarterTools has released an urgent security update for its SmarterMail email server after fixing a serious vulnerability rated 9.3 on the CVSS scale. The flaw was classified as critical because it could allow attackers to take full control of affected servers. Security experts warned that the issue posed a major risk to exposed systems. The … Continued
A former Google software engineer has been convicted by a U.S. federal jury for stealing confidential artificial intelligence data from Google and secretly sharing it for commercial use linked to China-based companies. The verdict was delivered in San Francisco after an 11-day trial, marking one of the most serious AI trade-secret cases in recent years. … Continued
A serious security flaw in WinRAR is still being actively exploited months after a fix was released. WinRAR is one of the most widely used file-compression tools across the world. Although a patch was made available in July 2025, many systems continue to run outdated versions. Security experts warn that this ongoing exposure puts organizations … Continued
Google has announced a major cybersecurity operation against IPIDEA, one of the world’s largest residential proxy networks. The action was carried out by Google’s Threat Intelligence Group to stop widespread abuse of consumer internet connections. According to Google, the network was being heavily misused by cybercriminals. The disruption is aimed at protecting everyday users and … Continued
Fortinet has released emergency security updates after confirming active exploitation of a serious vulnerability in its FortiOS Single Sign-On system. The flaw, tracked as CVE-2026-24858, allows attackers to bypass authentication controls. Security researchers found that the issue was already being abused in real-world attacks. This made immediate patching critical. The vulnerability affects how Fortinet devices … Continued
A newly identified ransomware strain called Sicarii has raised serious concern in the cybersecurity world. Security researchers have confirmed that files encrypted by this ransomware cannot be decrypted, even if victims pay the ransom. This makes Sicarii different from many traditional ransomware attacks. Once the damage is done, the data is effectively locked forever. Ransomware … Continued
Nike is investigating a potential cybersecurity incident after a ransomware group known as World Leaks claimed it leaked a large volume of the company’s internal data. The group alleges that around 1.4 terabytes of Nike data has been published online. Nike has acknowledged the situation and confirmed that it is actively reviewing the claim. However, … Continued
Microsoft has released an emergency security update to fix a serious zero-day vulnerability in Microsoft Office that was already being exploited by attackers. The flaw, tracked as CVE-2026-21509, was considered dangerous enough to require an out-of-band patch, released outside Microsoft’s regular monthly update cycle. The company confirmed that real-world attacks were observed before the fix … Continued
Cybersecurity experts say cyber attacks are becoming more advanced because attackers are now using artificial intelligence. AI allows hackers to create phishing emails, malicious scripts, and attack methods faster and at a much larger scale. These AI-driven attacks can quickly change their behaviour, making them difficult to detect. This shift has created serious challenges for … Continued
