Researchers uncovered a CrashFix campaign where a fake Chrome ad blocker crashes browsers to trick users into installing the ...

Report finds 82% container breach rate, widespread CVE backlogs, and growing reliance on trusted open source and AI ...

Experts exploited an XSS flaw in StealC’s admin panel, exposing operator sessions, system details & stolen cookies without ...

CTM360 uncovered 11,000+ SEO-optimized fake bank sites in the US and UK exploiting search visibility to run large-scale financial fraud.

GootLoader malware is abusing malformed ZIP archives that bypass common tools like WinRAR & deliver JavaScript payloads via ...

OpenAI will begin testing ads in ChatGPT for logged-in U.S. adults on free and Go tiers, stating ads won’t affect answers or ...

Exposed personal data on broker sites fuels scams, stalking, and identity theft; removal tools reduce online and physical ...

Five fake Chrome extensions impersonate Workday and NetSuite to steal cookies, block admin controls, and hijack sessions for ...

Cisco Talos reports China-linked APT UAT-8837 targeting North American critical infrastructure via a Sitecore zero-day, ...

Ukrainian and German police identify Black Basta suspects as alleged leader Oleg Nefedov is added to EU Most Wanted and INTERPOL Red Notice lists.

Cisco released fixes for CVE-2025-20393, a CVSS 10.0 zero-day RCE flaw in AsyncOS exploited by a China-linked APT via email ...

China-linked attackers used Venezuela-themed phishing and DLL side-loading to deploy the LOTUSLITE backdoor against U.S.