The Cybersecurity and Infrastructure Security Agency (CISA) has issued strong guidance urging organizations to adopt phishing-resistant multi-factor authentication (MFA) as the gold standard for protection. While traditional MFA [...]

North Korean state-sponsored hackers achieved a record-breaking year in cryptocurrency theft, stealing at least $2.02 billion from January through early December 2025. This represents a 51% increase from [...]

Cisco has disclosed a maximum-severity zero-day vulnerability (CVE-2025-20393, CVSS 10.0) in AsyncOS software for Secure Email Gateway and Secure Email and Web Manager appliances. A China-nexus APT group [...]

A new report from the Trusted Computing Group (TCG) published in December 2025 reveals a significant gap in business preparedness for post-quantum cryptography (PQC). While three-quarters of surveyed [...]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on December 17, 2025. The flaws affect Cisco [...]

ZeroFox Intelligence released its 2026 cyber threat predictions on December 16, 2025, highlighting generative AI’s full integration into attacks, geopolitical influences on cybercrime, and persistent ransomware trends based [...]

Cybersecurity professionals rely on a mix of free and commercial tools to detect threats, test defenses, and respond to incidents. This list covers the ten most recommended tools [...]

Audio streaming platform SoundCloud confirmed on December 16, 2025, that it suffered a security breach resulting in the theft of a database containing user email addresses and profile [...]

Microsoft announced in December 2025 that Defender for Cloud is extending its Cloud Security Posture Management (CSPM) capabilities to serverless workloads in Azure and AWS (public preview). This [...]

The Apache Software Foundation disclosed a denial of service vulnerability in Apache Struts on December 1, 2025 (updated December 10). The flaw (CVE-2025-64775 and related CVE-2025-66675) allows attackers [...]