Cybersecurity threats, breaches, and analysis
AI-powered deepfake attacks can now convincingly impersonate your CEO, family member, or IT support on a live video call. Learn how these attacks work, how to detect them in real time, and the proven defenses that actually stop them.
SIM swapping lets hackers take over your phone number and bypass SMS two-factor authentication. Learn how the attack works, who is at risk, and the exact steps to protect your accounts before it happens.
CVE-2025-55182 lets attackers steal every credential your Next.js app touches. Cisco Talos found 766 compromised hosts. Here is exactly how I scanned my own infrastructure and what you should do right now.
The LiteLLM supply chain attack hit Mercor and thousands of other companies through a single poisoned Python package. Here is a practical 5-step checklist to audit your open source dependencies before the next attack hits you.
TeamPCP weaponized a WAV audio file to hide credential-stealing malware inside a PyPI package. Here is how the attack worked and five tools that would have caught it before installation.
Eclypsium researchers discovered nine critical vulnerabilities across four popular low-cost IP KVM devices — including one rated 9.8 on the CVSS scale with no available fix. Here is why these thirty-dollar devices are the most dangerous thing on your network.
The Konni hacking group is turning compromised KakaoTalk accounts into malware distribution hubs. A deep dive into the attack chain and four practical defenses.
Socket researchers discovered 72 new malicious Open VSX extensions in the GlassWorm campaign, now using transitive dependencies to deliver payloads through trusted extensions.
Iran-backed hacktivist group Handala claims to have wiped 200,000 Stryker devices across 61 countries in a devastating wiper attack linked to MOIS and Void Manticore.
UNSW Sydney and Monash researchers developed negative luminescence technology that hides data in infrared thermal background, creating covert channels invisible to traditional network monitoring and surveillance.
A security researcher poisoned an AI knowledge base with three fake documents in under three minutes, making it report fabricated financial data with full confidence.
An ID verification company left over one billion identity records exposed online. Driver licenses, passports, and biometric data — all sitting on an unprotected server. Here is what happened and what you need to do right now.