Cybersecurity
MiniPlasma Zero-Day Gives SYSTEM Access on Patched Windows PCs
A security researcher has publicly released a proof-of-concept exploit for a newly disclosed Windows privilege escalation vulnerability nicknamed "MiniPlasma." The flaw allows an attacker to escalate ...
UK Cyber Security Resilience Bill: What It Means for VPN Privacy
The UK government has introduced the Cyber Security and Resilience Bill, a significant piece of legislation that reclassifies data centers as essential utilities and pulls them into a formal national ...
MSI Installer Malware Targets Crypto Traders Since June 2025
A sophisticated malware campaign discovered targeting cryptocurrency traders has been quietly active since June 2025, using a deceptively simple but effective trick: hardcoding SSH credentials and Git...
YellowKey and GreenPlasma: Two Windows Zero-Days Hit BitLocker
Security researchers have publicly disclosed two unpatched Windows zero-day vulnerabilities, named YellowKey and GreenPlasma, that target BitLocker encryption and the CTFMON input framework respective...
Windows 11 and Edge Zero-Days Hit Pwn2Own Berlin 2026
Security researchers demonstrated live, working exploits against Microsoft Edge and Windows 11 on the first day of Pwn2Own Berlin 2026, earning more than $500,000 in prize money in the process. For ev...
AI Phishing and Deepfakes Outpace Corporate Defenses in 2025 Survey
A new survey of 3,500 business leaders paints a contradictory picture of corporate cybersecurity: 82% of respondents feel prepared for modern threats, yet AI-driven attacks including voice cloning, de...
Fake Claude AI Search Results Fuel New ClickFix Mac Attack
Security researchers have uncovered a new wave of the ClickFix Mac social engineering attack, this time using fake search results for Anthropic's Claude AI tool as the entry point. The campaign tricks...
Google's May 2026 Report: AI Now Powering Zero-Day Exploits
Google's Threat Intelligence Group dropped a significant research report on May 12, 2026, confirming what security professionals have feared for years: artificial intelligence is no longer just a theo...
Singapore APT Warning: Can VPNs Protect Against State Attacks?
Singapore's Coordinating Minister for National Security, K Shanmugam, has publicly confirmed that the country recently faced sophisticated cyber attacks carried out by state-linked advanced persistent...
PCPJack Malware Exploits 5 CVEs to Steal Cloud Credentials
A newly identified credential theft framework called PCPJack is spreading across exposed cloud infrastructure by chaining five unpatched vulnerabilities together, harvesting login data at scale, and m...