A spoofed CCleaner download site is spreading a multi-stage malware that hijacks Chrome to steal credentials, cookies, and authentication tokens while recording keystrokes and screenshots.
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...
Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.
WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...
China-linked Jewelbug used shared infrastructure to conduct government espionage and cryptocurrency fraud, logging more than ...
AitM phishing hijacks Microsoft 365 accounts, then uses residential proxies and Microsoft Graph API access to collect payroll ...
Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...
We tend to picture courage as a personal virtue: an officer who runs toward danger, a bystander who steps in alone–a brave act by a brave actor. What I watched ...
OpenAI on Monday announced a new purpose-trained cybersecurity model, GPT-5.6-Cyber, and restructured its Daybreak program into two access tiers — but the most significant part of the announcement was ...
Spread the loveEver found yourself scratching your head when a website just isn’t behaving? Maybe your shopping cart empties ...
Microsoft 365 phishing campaign disclosed by Arctic Wolf Labs abuses Google Meet and Amazon S3 to bypass enterprise email ...