September 2025

A threat actor possibly of Russian origin has been attributed to a new set of attacks targeting the energy sector

A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency

Federal Civilian Executive Branch (FCEB) agencies are being advised to update their Sitecore instances by September 25, 2025, following the

The threat actor behind the malware-as-a-service (MaaS) framework and loader called CastleLoader has also developed a remote access trojan known

A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning (ERP) software, has come under active exploitation in the

Pentesting remains one of the most effective ways to identify real-world security weaknesses before adversaries do. But as the threat

Cybersecurity researchers have flagged a new malware campaign that has leveraged Scalable Vector Graphics (SVG) files as part of phishing