A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...

LofyGang resurfaces with LofyStealer disguised as Minecraft hack, exfiltrating IBANs and passwords to 24.152.36[.]241, ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

OpenAI is mandating macOS users update ChatGPT Desktop and other apps by May 8, 2026, due to a compromised JavaScript library ...

UNC6692 relies on email bombing and social engineering to infect victims with Snow malware: Snowbelt, Snowglaze, and ...

Run a quick self-audit against 10 warning signs that your authentication stack has critical vulnerabilities. Each sign includes a diagnostic check, an explanation of why it's dangerous, and a concrete ...

Over 750,000 websites require patching following discovery of DotNetNuke XSS vulnerability ...

Mythos combined four separate low-severity bugs into a complete browser sandbox escape. Traditional scanners evaluate ...

A hardcoded API key embedded in ClickUp’s public website exposed 959 corporate and government email addresses and more than 3 ...

Over 10 years of investigating the problem and possible solutions has led to Hidden Password, Password manager Online (HIPPO) ...

You would think AI could create secure, random, and strong passwords, but that's not actually true. In many cases, ...