Cyber Security

Organizations in India are facing a new wave of Hindi-language phishing emails that impersonate the Income Tax Department to distribute malicious disk-image files. This sophisticated campaign, orchestrated by the threat actor group TA4922, demonstrates a sharp pivot toward localized social

The gap between human capability and AI efficiency was bridged when a specialized hub identified years’ worth of software vulnerabilities in just four months. This milestone marks a decisive turning point in a struggle that has long favored those who

By injecting malicious VS Code tasks and Claude Code hooks, the attackers can poison internal repositories and influence subsequent development cycles. This recent supply-chain compromise targeting the @7nohe/openapi-react-query-codegen package illustrates a sophisticated shift in how threat actors exploit the TanStack

The ongoing reliance on VPNs as a primary access point without mandatory multi-factor authentication continues to be the most significant common weakness in modern public infrastructure security. This reality was underscored by recent breaches targeting administrative systems in Berlin and

Researchers found that a lack of internal discipline within the StopAndProtect group led to a catastrophic leak of their tradecraft and a complete view of their distributed network. This significant security breach, identified by forensic teams at Check Point Software