CISA confirms active exploitation of a critical Windows IKE Extension vulnerability. Patch immediately.

A new threat actor is tricking victims into paying for fake decryption keys and data deletion after attacks.

A sophisticated campaign, dubbed Operation CameraSwarm, has compromised over 14,000 Dahua IP cameras using multiple exploitation methods.

Researchers critical of OpenAI's decision to cut off access to its Trusted Access for Cyber program, impacting bug bounty efforts.

Healthtech firm CareCloud confirms a massive data breach, compromising sensitive medical information for over 3.7 million individuals.

Japanese cloud provider Sakura Internet confirms cyberattack on sales management system, impacting millions of customer records.

A threat actor is impersonating a data recovery service to trick victims into paying for non-existent decryption keys and data deletion.

A large-scale campaign dubbed CameraSwarm targeted over 14,500 Dahua IP cameras, primarily in Ukraine and Russia, over 35 days.

Cybersecurity agencies issue alert over AI-generated scripts exploiting Siemens S7 PLCs, posing a significant threat to US critical infrastructure.

A 45-day experiment in an AI-agent-only community found 82% of traffic to a honeypot account was malicious, with most attacks disguised as polite conversation.