A government organization providing cloud infrastructure to Indian companies is inadvertently distributing malware.

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

Threat actors are actively abusing the legitimate Windows utility mshta.exe to execute malicious HTML Application (HTA) files ...

UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...

A phishing campaign abuses Microsoft OAuth and Teams to redirect victims to fake login pages generated inside their browsers.

Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ...

Insulin dosing usually includes a daily basal insulin dose plus bolus doses around meals. Your doctor should help you build a plan. Bolus insulin is often based on two steps: correct high blood sugar ...

AI agents helped attackers launch a cloud credential theft campaign in under six hours, stealing thousands of third-party ...

A fake Twitch viewing extension exposed OAuth tokens through proxies, risking account takeovers for nearly 31,000 users.

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...