WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

Threat actors are increasingly turning legitimate software into part of their attack chains. Instead of deploying an obviously malicious executable, attackers can abuse trusted tools that already have ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.

There is no new OWASP list in 2026: the Top 10:2025 is the current standard. All 10 risks explained, what changed since 2021, ...

Mirage2FA uses AiTM phishing to steal Microsoft 365 credentials and authenticated sessions, bypassing conventional MFA and ...

Enterprises building agentic systems need to perform continuous testing to ensure their AIs remain on task. This emerging ...

Glimmer stakes out different ground: a dense model with native vision input, trained end-to-end around the agent loop, ...

Cloudflare Workers Spectre attack research published August 19, 2026 showed JWT token theft at 12 bits per second in live ...

A phishing campaign targeting cybersecurity conference attendees has been using Google Docs and other familiar online services to deliver malware, including a Windows payload that can install its own ...

SealTrust has published a live demonstration of an item-level digital product passport that it claims 'any reader can verify' ...

AMD's Ryzen 7 7700X3D takes on the old favorite across performance, pricing, and power consumption.

Jewelbug, a China-linked hack-for-hire group, breached 15 government ministries at once by inserting one script into a shared ...