Latest Cybersecurity News
View all →
Officials disrupt Chinese espionage operation that hit multiple federal agencies
Federal authorities Wednesday revealed a multi-layered Chinese state-sponsored espionage operation that’s targeted and compromised U.S. critical infrastructure, including multiple federal agencies, since 2018. Officials seized…
US seizes Chinese hacking platforms targeting Nasa, Fed and Senate
The Justice Department and the FBI said on Wednesday that they seized two Chinese state-sponsored online platforms that targeted US critical infrastructure and other critical…
Protect your Okta identities with Wiz
Protecting identities in the cloud is paramount to ensuring the security and integrity of your data and resources. Misconfigured identities or identity-related risks can create…
Elastic Security at Black Hat 2026: Alert Zero and agentic SOC
At Elastic, we know that the best way to build security tools is to bring them to the community, have security pros use them, and…
Critical Avada WordPress theme flaw enables zero-click RCE
A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the…
Critical Next.js Vulnerabilities Enables Remote Code Execution Attacks
Two critical Next.js flaws allow unauthenticated remote code execution on Windows-hosted applications using the Image Optimization API to process AVIF images. The first flaw, tracked…
WhatsApp Introduces Multi-Passkey and Complex 2FA Upgrades
Cross-Platform Passkey Integration Meta revealed a major security upgrade for WhatsApp on August 25, 2026, which increases passkey support and enables users to create numerous…
FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure
For years, China’s military and intelligence agencies, which carry out hacking campaigns against targets around the globe, have grown increasingly reliant on a vast web…
Critical WatchGuard Agent Flaws Let Unauthenticated Attackers Execute Remote Code
WatchGuard has revealed two critical vulnerabilities in its Windows WatchGuard Agent, which could allow unauthenticated attackers to execute arbitrary code on affected endpoints. These vulnerabilities,…