January 2026 was a wake-up month for enterprise security teams. In a single week, CERT-In released three high-severity ...

The news this week has struck at the very foundation of WhatsApp's existence. A massive class-action lawsuit filed in San ...

Web skimming campaigns use obfuscated JavaScript code to steal credit card data from checkout pages without detection by ...

Think about the last ten visitors to your online store. You probably picture ten people browsing on their phones or laptops.

Experts details PeckBirdy, a JavaScript C2 framework used since 2023 by China-aligned attackers to spread malware via fake ...

ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.

LayerX discovered 16 extensions in the Chrome Web Store and Microsoft Edge Add-ons marketplace that steal users’ ChatGPT ...

This is Part 2 of our two-part technical analysis on the Gopher Strike and Sheet Attack campaigns. For details on the Gopher Strike campaign, go to Part 1.IntroductionIn September 2025, Zscaler ...

AI-generated code can introduce subtle security flaws when teams over-trust automated output. Intruder shows how an AI-written honeypot introduced hidden vulnerabilities that were exploited in attacks ...

The disclosure underscores how recovery keys stored in Microsoft’s cloud can be accessed under warrant, even when enterprise ...