Verizon’s 2025 Data Breach Investigations Report (DBIR) presents a comprehensive analysis of over 22,000 security incidents, including 12,195 confirmed data breaches across 139 countries. The report underscores a significant escalation

Google has confirmed a sophisticated phishing attack affecting Gmail users globally, following public disclosure by Ethereum developer Nick Johnson. The attacker exploited Google’s legitimate infrastructure, specifically Google Sites, to host

The Russian state-aligned group APT29 is behind a new malware campaign using a previously undocumented loader called GRAPELOADER, alongside an updated version of WINELOADER. The attacks primarily target European diplomatic

Threat actors from North Korea (Kimsuky), Iran (MuddyWater), and Russia (APT28, UNK_RemoteRogue) are increasingly using the “ClickFix” tactic in espionage operations. ClickFix manipulates victims into manually running malicious PowerShell commands

Apple released urgent security updates addressing two actively exploited vulnerabilities: CVE-2025-31200, a memory corruption flaw in Core Audio allowing code execution via malicious audio files, and CVE-2025-31201, an RPAC flaw