ReliaQuest

Ransomware data leaks surged dramatically in late 2025, with victim organizations posted to extortion sites increasing by 50% from the…

A sophisticated phishing campaign targets business leaders and IT professionals via LinkedIn, using industry-specific lures to build false trust and…

Attackers are exploiting trusted security tools like EDR software and Windows utilities to deploy malware with stealth and persistence, shifting…

A sophisticated phishing campaign is targeting Zendesk users with over 40 deceptive domains that host fake login pages to steal…

Identity-related weaknesses and outdated vulnerabilities are the main causes of the rise in cloud security incidents, with attackers exploiting these…

The UK's NCSC launched the Vulnerability Research Institute (VRI) to enhance cyber resilience through advanced vulnerability research, mitigation strategies, and…

Federal agencies and businesses using Citrix NetScaler systems must urgently patch **CVE-2025-5777** after CISA confirmed active attacks, issuing a strict…

A critical vulnerability (CVE-2025-5777) in Citrix NetScaler systems is being exploited, enabling session hijacking and unauthorized access despite Citrix's denial…

A critical Citrix NetScaler vulnerability (CVE-2025-5777) allows attackers to steal session tokens by exploiting malformed login requests to dump memory…

Over 1,200 Citrix NetScaler systems remain vulnerable to CVE-2025-5777, a severe authentication bypass flaw enabling session hijacking and MFA bypass,…

A critical vulnerability in Citrix NetScaler systems (CVE-2025-5777, CVSS 9.3), dubbed CitrixBleed 2, allows attackers to bypass authentication and compromise…

ClickFix is a growing social engineering tactic that tricks users into executing harmful commands by pretending to fix system issues,…