Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the ...

Researchers at Sysdig say the first fully agentic ransomware attack shows AI can independently plan, adapt and execute ...

Learn how EvilTokens hides Microsoft 365 phishing behind browser-side decryption and how browser-level analysis helps SOC ...

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

Machine identities now outnumber human users across most enterprises, yet many remain unmanaged, overprivileged, and ...

SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims' networks for cybercrime groups ...

Law enforcement dismantled 326 servers and 142 domains tied to Amadey and StealC, recovering 27 million stolen credentials.

HOSTAFRICA launches Africa's first hosting MCP server: Manage your VPS from Claude and ChatGPTYour AI assistant can now start servers, create backups and configure firewalls – no control panel ...

The SANS State of Identity Threats and Defenses survey 2026 explored the security risks created by non-human identities (NHIs ...