A new Android malware locks device screens and demands that users pay a ransom to keep their data from being deleted. Dubbed “DroidLock” by Zimperium researchers, the Android ransomware-like malware ...

Microsoft patched 57 vulnerabilities in its Patch Tuesday December 2025 update, including one exploited zero-day and six high-risk vulnerabilities. The exploited zero-day is CVE-2025-62221, a ...

Apache warns of CVE-2025-55752 and CVE-2025-55754 in Tomcat 9–11, risking remote code execution and console attacks. Urgent updates are strongly advised.

China claims it has “irrefutable evidence” that the U.S. National Security Agency (NSA) launched a two-year cyberattack campaign on China’s National Time Service Center (NTSC). In a WeChat post, China ...

APT28, the long-running actor tracked as Fancy Bear, Sofacy and Sednit, used a compact but technically sophisticated campaign that researchers documented as Phantom Net Voxel. The campaign is an ...

The European Union Agency for Cybersecurity (ENISA) and the European Commission have signed a landmark contribution agreement to establish and operate the EU Cybersecurity Reserve. This initiative, ...

We all know the creepy feeling of targeted ads popping up after a casual conversation about a product. Or the unsettling realization that your search history seems to follow you around the internet.

Operation Serengeti 2.0 reveals why cybercrime in Africa has evolved from low-volume fraud to a continent-spanning economy of digital extortion. The success of the operation is built on the continuous ...

CISA issues four ICS advisories exposing critical vulnerabilities in Siemens, Tigo Energy, and EG4 devices used in industrial and energy control systems.

In a world where digital infrastructures run global empires, even the biggest names in the fast-food industry aren’t immune to security blunders. That’s exactly what one independent researcher ...

CISA flags active exploits in N-able N-central: CVE-2025-8875 (deserialization) and CVE-2025-8876 (command injection).

Microsoft has disclosed a serious vulnerability in its collaboration platform, Microsoft Teams, that could open the door to Remote Code Execution (RCE) attacks. The flaw, tracked as CVE-2025-53783, ...