A vulnerability in Subaru’s Starlink connected vehicle service exposed US, Canada, and Japan vehicle and customer accounts.

Korean VPN supply chain attack, PayPal settles with New York for $2 million, trojanized RAT builder targets script kiddies.

North Korean fake IT workers are more aggressively extorting their employers in response to law enforcement actions.

The US has announced charges against five individuals involved in a fake IT workers scheme to funnel funds to North Korea.

CISA has added the JQuery flaw CVE-2020-11023, previously linked to APT1, to its Known Exploited Vulnerabilities (KEV) ...

Cyber Insights 2025 examines expert opinions on the expected evolution of more than a dozen areas of cybersecurity interest ...

Four decades of student and educator information was stolen from PowerSchool – tens of millions are potentially affected.

Pwn2Own Automotive 2025 participants have earned a total of $886,000 for exploits targeting EV chargers and infotainment ...

Eclypsium warns Palo Alto Networks firewalls are impacted by BIOS and bootloader flaws, but the vendor says users should not ...

Conduent has confirmed suffering disruptions due to a cyberattack after government agencies reported service outages.

Cyber Insights 2025 examines expert opinions on the expected evolution of more than a dozen areas of cybersecurity interest over the next 12 months. We spoke to hundreds of individual experts to gain ...

SonicWall credited Microsoft for reporting CVE-2025-23006, a critical remote command execution vulnerability possibly ...