Uncategorized
-
Fake VS Code AI Extension Used to Deploy Malware via Moltbot Name
Read more: Fake VS Code AI Extension Used to Deploy Malware via Moltbot NameSecurity researchers have discovered a malicious Visual Studio Code extension that impersonated Moltbot (formerly Clawdbot) and claimed to be a free AI coding assistant. The extension was published on the official VS Code Marketplace before…
-
Google Gemini Security Issue Enabled Silent Access to Private Calendar Events
Read more: Google Gemini Security Issue Enabled Silent Access to Private Calendar EventsSecurity researchers have uncovered a Google Gemini prompt injection vulnerability that allowed attackers to access private Google Calendar data using malicious calendar invites. The flaw abused indirect prompt injection, bypassing authorization controls without direct user…
-
LastPass Phishing Scams Resurface, Users Urged to Stay Alert
Read more: LastPass Phishing Scams Resurface, Users Urged to Stay AlertLastPass is warning users about a renewed phishing campaign impersonating the official LastPass service. The attack aims to steal users’ master passwords by sending fake emails that claim an upcoming system maintenance and urge recipients…
-
Fortinet Patches Critical FortiSIEM Vulnerability Allowing Remote Code Execution
Read more: Fortinet Patches Critical FortiSIEM Vulnerability Allowing Remote Code ExecutionFortinet has released security updates to fix a critical vulnerability in FortiSIEM that could allow an attacker to execute code remotely without authentication. The flaw is tracked as CVE-2025-64155 and has a CVSS score of…
-
EDR or XDR? Which One to Choose?
Read more: EDR or XDR? Which One to Choose?EDR (Endpoint Detection and Response) and XDR (Extended Detection and Response) are two essential cybersecurity solutions in today’s threat landscape, where digital attacks such as ransomware, malware, and phishing continue to grow in both frequency…
-
Advanced VoidLink Linux Malware Targets Cloud and Container Environments
Read more: Advanced VoidLink Linux Malware Targets Cloud and Container EnvironmentsCybersecurity researchers have uncovered a new and highly advanced Linux malware framework called VoidLink, designed specifically to operate in cloud and container environments. First discovered in December 2025, this malware is considered a serious threat…
-
Trend Micro Releases Security Updates to Fix Critical Apex Central Windows Flaws
Read more: Trend Micro Releases Security Updates to Fix Critical Apex Central Windows FlawsTrend Micro has released security updates to address several serious vulnerabilities affecting on-premise versions of Apex Central for Windows. One of these flaws is classified as critical because it could allow attackers to execute malicious…
-
CISA Warns of Actively Exploited Security Flaws in Microsoft Office and HPE OneView
Read more: CISA Warns of Actively Exploited Security Flaws in Microsoft Office and HPE OneViewThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a new security warning after adding two vulnerabilities affecting Microsoft Office and HPE OneView to its Known Exploited Vulnerabilities (KEV) catalog. This means the flaws…
-
5 Critical Threats That Shaped Web Security in 2025
Read more: 5 Critical Threats That Shaped Web Security in 2025As 2025 comes to an end, security professionals are realizing that traditional web security defenses are no longer enough. Artificial intelligence, advanced injection techniques, and supply chain compromises have forced organizations to rethink how they…
-
What is VLAN and why it Matters?
Read more: What is VLAN and why it Matters?A VLAN (Virtual Local Area Network) is a network technology used to divide one physical network into multiple virtual networks. In an office network environment, VLANs help network administrators manage user access more effectively. In…