Cybersecurity Hub

Cybersecurity

News, analysis, learning and expert commentary for security professionals

The Cybersecurity Hub brings together editorial coverage, vulnerability context, threat signals and learning resources. For the cybersecurity news feed, visit News > Cybersecurity. Product areas like the Vulnerability Database and Threat Intelligence are separate product sections.

Articles

CVEs

Threat Signals

Courses

Latest cybersecurity articles

View all

New BootROM Break for Apple A12 and A13: Why “usbliter8” Cannot Be Patched Away

A new hardware-level security issue has entered the Apple ecosystem. Researchers from Paradigm Shift have published an exploit called “usbliter8” that enables code execution inside the SecureROM stage of Apple’s A12 and A13 chips.This kind of vulnerability is very different from an ordinary software bug. SecureROM is the first boot code permanently written into the chip during manufacturing. It sits at the beginning of the device’s chain of trust and cannot be rewritten later. That means a flaw at this level cannot be fully removed with a standard iOS, iPadOS, watchOS, or firmware update.That is what makes usbliter8 significant: when the exploit succeeds, it gains control before Apple’s signed boot process has a chance to take over.

Editor27 days ago

Featured CVEs

CVE Database

CVE-2021-44228CriticalCVSS 10.0KEVExploitPatch

Apache Log4j2 JNDI RCE (Log4Shell)

Apache · Log4j2·over 4 years ago

CVE-2026-21954CriticalCVSS 9.8KEVExploitPatch

Windows Kernel Privilege Boundary Failure

Microsoft · Windows Kernel·28 days ago

CVE-2026-20881CriticalCVSS 9.6KEVExploitPatch

Fortinet SSL VPN Session Validation Bypass

Fortinet · FortiGate SSL VPN·28 days ago

Threat signals

Threat Intelligence

ransomware_activityTLP:AMBERCritical

VoidLock Collective claims new healthcare victims

The ransomware group posted redacted claims against two mock healthcare organizations. Defensive teams should review VPN exposure and phishing controls.

dark_web_monitoring_mock27 days ago

infrastructure_changeTLP:AMBERHigh

Phantom Crane infrastructure shift detected

Analysts observed Phantom Crane moving C2 infrastructure to new cloud regions. The shift correlates with expanded targeting of telecom providers.

vendor_report27 days ago

malware_activityTLP:GREENHigh

NeonStealer campaign targeting e-commerce payment flows

Phishing kits deploying NeonStealer have increased in volume. The stealer harvests browser credentials and payment data from e-commerce sessions.

open_source28 days ago

Expert insights

View all

Vulnerability Management

Why CVSS Alone Is Not Enough for Patch Prioritization

CVSS scores provide a useful baseline but fail to capture exploitation likelihood, asset context and business impact. Teams that combine CVSS with EPSS, KEV status and local asset criticality make faster and more accurate triage decisions.

Dr. Elif Soykan·Dragons Community Research

Vulnerability Research Lead · 30 days ago

Ransomware

The Ransomware Economy Is More Professional Than Most Enterprises

Modern ransomware operations have matured into structured businesses with recruitment pipelines, customer support and affiliate programs. Defenders need to match that professionalism in their incident preparation and response planning.

Kerem Aydın

Threat Intelligence Director · about 1 month ago

Explore cybersecurity

Threats

Threat Overview

Threat-focused editorial view covering actors, malware and campaign summaries.

Vulnerabilities

Vulnerability Context

Vulnerability explainers, editorial context and patch priority guidance.

Cyber Attacks

Coverage of notable cyber attacks, campaign analysis and incident categories.

Rankings

Top 10

Top-ranked cybersecurity items by risk, severity and activity.

Learning

Pro

Cybersecurity Course

Structured cybersecurity learning content for security professionals.