An 18-Year-Old Bug Just Put a Third of the Web’s Servers at Risk
A critical NGINX vulnerability lets unauthenticated attackers crash your web server and possibly run code.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
FortiBleed Shows Why Default Passwords Are Still a Critical Risk
The FortiBleed Fortinet firewalls compromised campaign has handed attackers working logins for over 30,000 devices across 194 countries.
Three New Malware Loaders Are Riding the ClickFix Wave
Researchers have linked three new ClickFix malware attacks to loaders that open the door for data theft and ransomware.
A New Malware Loader Checks Your Graphics Card Before It Attacks
A new OnionDrop loader malware campaign is using nation state level evasion tricks to deliver password stealing payloads at scale.
Hackers Are Already Inside Joomla and LiteSpeed Before You Even Patch
Joomla LiteSpeed vulnerabilities are being exploited right now, and CISA wants federal agencies patched within days.
Cisco Patches SD-WAN vManage Flaw After Hackers Use It to Seize Root Access
A Cisco SD-WAN vManage vulnerability is being used in live attacks to seize root control of networks.
China-Linked Spies Lived Inside Medical Research Networks for Two Years
A REDCap server breach gave China-linked hackers two years inside medical research networks before anyone noticed.
FBI and Google Dismantle Outsider Enterprise Phishing Network
The FBI shut down a Chinese AI phishing service called Outsider Enterprise that operated over one million malicious URLs.
Maine Shuts Down Breach Database After VRChat, Discord Hoax
Maine's Attorney General office shut down its maine data breach portal after discovering fabricated breach notifications for gaming platforms.
New Attack Method Turns AI Coding Assistants Into Trojan Horses
Security researchers have uncovered an agentjacking attack that hijacks AI coding agents using a single injected Sentry error to execute malicious code.
Critical Ivanti Sentry Flaw Under Active Attack Demands Immediate Mitigations
Cybercriminals are actively exploiting the critical Ivanti command injection vulnerability in Sentry after proof-of-concept code became publicly available.
NIGHTFORGE Malware Uses VMware Binary to Infiltrate Cambodian Government
Cybercriminals are exploiting VMware binary abuse techniques to deploy the NIGHTFORGE loader in sophisticated espionage campaigns targeting government institutions.