Microsoft has revealed that a threat actor it tracks as Storm-1977 has conducted password spraying attacks against cloud ...

ToyMaker deploys LAGTOY malware to steal credentials and sell access to CACTUS ransomware groups for double extortion.

Earlier this month, Google-owned Mandiant also revealed that another security flaw in ICS (CVE-2025-22457) has been ...

Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully ...

The web shells grant the threat actor the ability to execute arbitrary commands in system context, with the privileges of the ...

Non-Human Identities, for the most part, authenticate using secrets: API keys, tokens, certificates, and other credentials ...

As many as 159 CVE identifiers have been flagged as exploited in the wild in the first quarter of 2025, up from 151 in Q4 ...

WhatsApp has introduced an extra layer of privacy called Advanced Chat Privacy that allows users to block participants from ...

Messaging apps such as Signal and WhatsApp are used to contact targets, inviting them to join a video call or register for ...

Cybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that ...

Microsoft secures MSA and Entra ID with Azure Confidential VMs + HSM, preventing token forgery and reducing breach risks.

Phishers abused Google Sites and DKIM replay to send valid-signed emails, bypassing filters and stealing credentials.