Apple released critical security updates across its entire product ecosystem to address CVE-2025-43300, a high-severity vulnerability actively exploited in sophisticated cyberattacks targeting specific individuals. The flaw in Apple's ImageIO component allows attackers to corrupt device me...
North Korean hackers are expanding their cyber attack targets beyond software developers to include marketing professionals and cryptocurrency traders, using ClickFix social engineering tactics to distribute BeaverTail and InvisibleFerret malware. The Lazarus-affiliated Gwisin Gang operate...
A critical vulnerability in Microsoft Entra ID (formerly Azure AD) could have allowed attackers to gain complete administrative access to any organization's cloud identity system without detection. The flaw combined legacy "actor tokens" from Microsoft's deprecated Access Control Service w...
Canadian police have shut down TradeOgre cryptocurrency exchange and seized over $40 million in digital assets, marking the first crypto exchange closure by Canadian law enforcement and the country's largest asset seizure. The privacy-focused exchange, which specialized in anonymous tradin...
Cybercriminals are targeting Mac users through a sophisticated malware campaign that creates fake GitHub repositories mimicking popular applications like LastPass, 1Password, Dropbox, and Notion. The attackers use SEO poisoning to rank malicious links high in search results, then trick use...
