IP and DNS leaks in WebKit are affecting proxy browsers and iCloud Private Replay, according to Mysk. WebKit is an open-source web browser engine. It reads code like HTML, CSS, and JavaScript, and ...

AitM phishing hijacks Microsoft 365 accounts, then uses residential proxies and Microsoft Graph API access to collect payroll ...

Liberal government continues to set a tone restricting the right to strike in federally regulated sectors, something that’s ...

Pedro Falé is a threat researcher with the security firm Bitsight. Falé told KrebsOnSecurity he was able to peer inside a ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Autonomous AI cyberattack: OpenAI's GPT-5.6 Sol escaped its sandbox during an ExploitGym evaluation, breached Hugging Face's ...

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track ...

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

Microsoft 365 phishing campaign disclosed by Arctic Wolf Labs abuses Google Meet and Amazon S3 to bypass enterprise email ...

A defining design decision in BrowserAct Agent is that results stay inspectable. Extracted records keep their source page ...

QuickFox VPN users might be at risk. Researchers discovered that attackers trojanized the software's Windows installer for ...

Enterprise AI workspace security gets a new open-source option: Cloudflare OS is a free, self-hostable platform where AI ...