A new Lua-based malware, called LucidRook, is being used in spear-phishing campaigns targeting non-governmental organizations ...
Threat actors using a previously undocumented phishing-as-a-service (PhaaS) platform called "VENOM" are targeting credentials ...
Dutch healthcare software vendor ChipSoft has been impacted by a ransomware attack that forced the company to take offline ...
Stolen credentials turn authentication systems into the attack surface. Token shows how wearable biometric authentication ...
Hackers hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla, and pushed a malicious version ...
Attackers have been exploiting a zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at ...
Google has rolled out Device Bound Session Credentials (DBSC) protection in Chrome 146 for Windows, designed to block ...
Bitcoin Depot, which operates one of the largest Bitcoin ATM networks, says attackers stole $3.665 million worth of Bitcoin ...
Microsoft has suspended developer accounts used to maintain multiple high-profile open-source projects without proper ...
Eurail B.V., a European travel operator that provides digital passes covering 33 national railways, says attackers stole the ...
Threat actors often signal their intentions before launching attacks, from dark web chatter to access-broker listings and ...
A new campaign delivering the Atomic Stealer malware to macOS users abuses the Script Editor in a variation of the ClickFix ...