In 2024, dormant accounts, unmanaged SaaS access, and GenAI permissions expose enterprises to data breaches and insider ...

OpenAI banned ChatGPT accounts tied to Russian, Chinese, and Iranian hackers using AI for malware and influence campaigns.

Supply chain attack infects 16 GlueStack npm packages used by 1M weekly users, enabling malware that steals data and controls ...

A phishing campaign infects 722 users with malicious browser extensions in Latin America to steal bank login data.

Google fixed CVE-2025-5419 in Chrome after detecting active exploitation, affecting all platforms using V8 engine.

Fake Gitcode and DocuSign sites are tricking users into running PowerShell scripts that install NetSupport RAT.

AEV automates continuous attack simulations for organizations, helping prioritize exploitable risks and improve cyber ...

A new malware campaign tricks macOS users with fake Spectrum CAPTCHA sites to steal passwords and deliver Atomic Stealer ...

The U.S. Department of Justice (DoJ) on Wednesday announced the seizure of cryptocurrency funds and about 145 clearnet and ...

New findings reveal Bitter, an Indian-aligned threat group targeting governments via spear-phishing and advanced malware ...

Google-owned Mandiant, in a technical overview of vishing and the social engineering attacks, pointed out the distinct ...

In March 2024, the DoJ indicted seven hackers associated with APT31, accusing them of engaging in sweeping cyber espionage ...