Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

Discord users are facing a growing wave of account hijackings that turn their profiles into tools for cybercriminals spreading scams.

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the ...

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026.ClickFix – a social engineering ...

A security flaw in the Gravity SMTP WordPress plugin has drawn more than 17 million automated exploit attempts since early May 2026 — and every site that ran an unpatched version while those attacks ...

Security leaders from Datadog, Jamf, and ASOS weigh in on the visibility crisis quietly unfolding as AI puts code-writing capabilities in every employee's hands. "I spent the weekend burning through ...

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication ...

This week: a DeepSeek browser-only ransomware path, AI pen testing trust dropped, Mustang Panda targeted India, Tata breach ...

None ...

Scammers are spreading a fake crypto casino scam in the name of a popular YouTuber, with compromised Discord accounts as the ...

Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a ...

Kaspersky reports ToddyCat’s Umbrij abuses headless Chromium and OAuth flows to extract Gmail authorization codes, enabling ...