The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting...

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. [...]...

77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments ...

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks....

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (n...

A Google Firebase misconfiguration lets users of tl;dv, an AI meeting tool, query any other users' meeting information and potentially join calls....

Newer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they leave behind....

Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access....

Researchers dug into the root of the problem with the goal of promoting industry collaboration on improved protective measures....

Last month's incidents in which the AI model breached real-world systems derived from over-permissioning, especially with Internet access....