Security

For years, account takeover was simple. Attackers bought stolen credentials in bulk, ran them through automated tools, and waited for…

There’s a new banking malware operation targeting Mexico. Elastic Security Labs tracks it as REF6045. The tool: a PowerShell toolkit…

A China-linked threat group has been hitting vulnerable Roundcube servers at US and Canadian universities. Their targets? Physics and engineering…

A recent wave of EvilTokens attacks is exposing a blind spot in email security. Dubbed “ghost phishing,” the technique keeps…

Ubiquiti has shipped urgent patches for multiple critical vulnerabilities across UniFi Connect, Talk, Access, Protect, and OS. These flaws could…

IBM’s 2025 Cost of a Data Breach Report found that 16% of studied breaches involved attackers using AI tools, mostly…

That green “Verified” badge on a signed Git commit? It doesn’t guarantee the commit hash is unique. New research from…

DuckDuckGo just added a feature YouTube haters will love: built-in ad blocking for the platform. The browser now blocks most…

A cybersecurity company promising million-dollar payouts for zero-day exploits is run by two convicted felons with a long history of…

The clock is ticking for federal agencies. CISA added an actively exploited Langflow vulnerability to its Known Exploited Vulnerabilities catalog…