An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

Digital security is crucial for journalists in Bangladesh ahead of the 2026 elections. Learn about risks and protective ...

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026.ClickFix – a social engineering ...

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

Anthropic’s AI-run espionage report shows why enterprises need stronger governance for AI agents, MCP connectors, and ...

With the ability to take control of distributed devices at scale, HalluSquatting has the potential to achieve various ...

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

Ethereum researchers are using AI agents to hunt for vulnerabilities, shifting security work from finding bugs to proving ...

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...

Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...