Computer Security News

Microsoft prepares to end support for its Windows 10 operating system on October 14, 2025. Approximately 32 million devices in Germany, accounting for around 65% of all household computers, still run on Windows 10. This widespread reliance on an aging...

PhishWP, a newly discovered WordPress plugin, is being used by cybercriminals to maliciously convert legitimate websites into phishing traps, putting user data at risk. Cybercriminals created the WordPress plugin PhishWP. It generates fake payment pages that closely resemble legitimate providers...

MediaTek, one of the world’s largest semiconductor companies, has disclosed a series of security vulnerabilities in its chipsets that could allow attackers to execute remote code on affected devices. These vulnerabilities impact a wide range of products, including smartphones, tablets,...

A critical vulnerability, identified as CVE-2024-8474, has been discovered in OpenVPN Connect, a popular VPN client software. This flaw could allow attackers to access users' private keys, potentially compromising the confidentiality of their VPN traffic. The vulnerability affects all versions...

A malicious copycat of the popular "EditThisCookie" extension has been discovered stealing login credentials and engaging in phishing activities. The legitimate EditThisCookie extension, which had over 3 million users and 11,000 ratings, was recently removed from the Chrome Web...

A proof-of-concept (PoC) exploit for the critical OpenSSH vulnerability CVE-2024-6387, also known as "regreSSHion," has been released, raising alarms across the cybersecurity community. The flaw, which affects millions of OpenSSH servers globally, allows unauthenticated, remote attackers to execute arbitrary...

The EAGERBEE malware, a sophisticated backdoor previously linked to cyberespionage campaigns in the Middle East and Southeast Asia, has undergone significant updates. Recent investigations reveal that EAGERBEE now features enhanced payload deployment capabilities and command shell functionalities, raising concerns...

Microsoft has revealed plans to invest approximately $80 billion in fiscal year 2025 to construct AI-enabled datacenters worldwide. This massive investment underscores the company's commitment to advancing artificial intelligence technology and maintaining its position at the forefront of the global...

A critical Windows Registry Elevation of Privilege vulnerability, identified as CVE-2024-43641. This flaw, which affects various editions of Windows Server 2025, Windows 10, and Windows 11, has been assigned a CVSS v3.1 score of 7.8, indicating high severity. The vulnerability...

Nikki-Universal Co. Ltd., a prominent chemical manufacturer, has fallen victim to a sophisticated ransomware attack. The incident, which the company confirmed on December 27, 2024, involved the encryption of electronic data on some of its servers, with the ransomware...