Security News & Threat Intelligence
What is the AppLocker bypass flaw and how can malicious apps exploit it in Windows systems?
A critical misconfiguration in Microsoft’s AppLocker block list allows attackers to bypass application restrictions by manipulating file version metadata. Researchers at Varonis discovered that Microsoft incorrectly s...
How does IndiaMART use Google Cloud Armor for AI-based cybersecurity and DDoS protection?
IndiaMART, a leading Indian B2B marketplace, strengthened its defenses against DDoS attacks and malicious bots by integrating Google Cloud Armor into its digital infrastructure. This AI-powered tool filters bad traffi...
What was the recent Microsoft server hack and how did it affect global organizations?
A major cyberattack exploited a zero-day vulnerability in Microsoft SharePoint servers, affecting nearly 100 organizations worldwide. The breach allowed attackers—possibly state-sponsored—to insert backdoors into self...
What is 'Scan to Pay' and how does it work step-by-step?
Scan to Pay is a digital payment method where users scan a QR code using a smartphone to instantly pay a merchant. This system uses QR code technology, a payment gateway, and UPI or wallet-based apps like Google Pay, ...
How did a weak password lead to the downfall of a 158-year-old UK logistics company in a ransomware attack?
A single weak password led to the devastating collapse of KNP Logistics, a 158-year-old UK transport company, after it fell victim to the Akira ransomware gang. The attackers exploited a compromised employee password,...
What is the new 7-Zip vulnerability CVE-2025-53816 and how can it crash systems using RAR5 files?
A newly discovered memory corruption vulnerability in 7-Zip, tracked as CVE-2025-53816, allows attackers to craft malicious RAR5 archive files that trigger heap-based buffer overflows, leading to denial-of-service (Do...
What are the best ways to protect online video calls from hackers in 2026?
In 2026, online video conferencing remains an essential part of work, education, and communication—but also a key target for cybercriminals. To protect your calls from hackers, it’s important to use secure platforms w...
What are the major cybersecurity threats to watch out for in 2026?
In 2026, the cybersecurity landscape is dominated by advanced threats such as AI-powered phishing, supply chain attacks, deepfake scams, and critical infrastructure targeting. With the rise of cloud-first environments...
What happened in the June 2025 WestJet cyber attack and how did it impact their systems?
In June 2026, Canadian airline WestJet experienced a cyber attack that caused disruptions to its website and mobile app. While flight operations remained unaffected, internal systems were compromised. The threat group...
What is the Fortinet FortiWeb CVE-2025-25257 vulnerability and how is it being exploited?
The CVE-2025-25257 vulnerability is a critical SQL injection flaw found in Fortinet’s FortiWeb web application firewall. Actively exploited in real-world attacks, it allows unauthenticated attackers to send crafted HT...
What are the best ways to detect and stop AI-driven cyberattacks like deepfakes, fake recruiters, and cloned CFOs in real time?
AI-driven attacks are rapidly evolving, using technologies like deepfakes, voice cloning, and synthetic profiles to deceive employees and executives. To combat these threats in real time, organizations must deploy adv...
What is the Lenovo Protection Driver Vulnerability CVE-2025-4657 and How Can You Fix It?
The Lenovo Protection Driver vulnerability (CVE-2025-4657) is a buffer overflow flaw found in multiple Lenovo applications, including Lenovo PC Manager, Browser, and App Store. This vulnerability allows local attacker...
What is China's Massistant surveillance tool and how does it extract data from confiscated phones?
Massistant is a mobile surveillance tool developed by SDIC Intelligence (formerly Meiya Pico), used by Chinese law enforcement to secretly extract SMS, GPS, contacts, images, and encrypted app data from confiscated An...
What Are the Latest Sophos Intercept X for Windows Vulnerabilities and How Do They Enable Arbitrary Code Execution?
Three high-severity vulnerabilities—CVE-2024-13972, CVE-2025-7433, and CVE-2025-7472—have been discovered in Sophos Intercept X for Windows, allowing local attackers to gain system-level privileges and execute arbitra...
How to Detect Vulnerabilities in Open-Source Software | Tools, Risks & Best Practices
Learn how to detect vulnerabilities in open-source software using tools like Snyk and Dependabot. Discover common risks, real-world threats, and expert best practices for secure development.
How can beginners detect and analyze PDF malware step by step?
Learn how to detect and analyze PDF malware using simple, beginner-friendly steps. PDF malware is a growing cyber threat where attackers embed malicious JavaScript, links, or files inside PDF documents. This guide exp...
![Top 10 Famous Ethical Hackers in India [Updated 2026]](https://www.webasha.com/blog/uploads/images/202608/image_140x98_da23f65c290cfbf1237d77aec58a2f0f.jpg)