A phishing campaign infects 722 users with malicious browser extensions in Latin America to steal bank login data.

Supply chain attack infects 16 GlueStack npm packages used by 1M weekly users, enabling malware that steals data and controls ...

PathWiper malware hit Ukraine’s critical systems in 2025, wiping data via admin console access and worsening conflict-driven ...

A new malware campaign tricks macOS users with fake Spectrum CAPTCHA sites to steal passwords and deliver Atomic Stealer ...

AEV automates continuous attack simulations for organizations, helping prioritize exploitable risks and improve cyber ...

New findings reveal Bitter, an Indian-aligned threat group targeting governments via spear-phishing and advanced malware ...

Fake Gitcode and DocuSign sites are tricking users into running PowerShell scripts that install NetSupport RAT.

It's this shift that makes the real difference. Security stops being the team that says "no" and starts being the team that ...

Cisco patches critical ISE flaw affecting AWS, Azure, OCI users—unauthenticated access could expose sensitive systems.

Qualcomm has shipped security updates to address three zero-day vulnerabilities that it said have been exploited in limited, ...

The U.S. Department of Justice (DoJ) on Wednesday announced the seizure of cryptocurrency funds and about 145 clearnet and ...

Several popular Chrome extensions send sensitive user data over unencrypted HTTP, exposing millions to interception and privacy risks.