The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.
AI driven cyber attacks are accelerating threat speed and reshaping enterprise incident response, exposing gaps in governance, identity verification, and decision making across organizations.
Cybersecurity experts warn that AI powered social engineering campaigns are evolving beyond traditional phishing, prompting organizations to adopt proactive disruption strategies across multiple communication channels.
Cybersecurity researchers have identified multiple ClickFix campaigns distributing malware loaders including BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, highlighting evolving attack techniques that leverage social engineering, compromised websites, and fake software updates.
Researchers uncover a global IRSF scam using fake CAPTCHA pages and over 120 Keitaro campaigns driving SMS fraud, crypto theft, and large scale cybercrime operations.
AI powered cyber fraud is rising rapidly, prompting organizations to rethink resilience strategies, risk measurement, and crisis preparedness in an evolving threat landscape.
National CERT warns freelancers, students, and job seekers in Pakistan about a WhatsApp-based job scam involving obscene content, impersonation, and extortion demands of up to 15 lac PKR.