Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...

A researcher discovered five different exploit paths that stem from an architectural weakness in Windows' Remote Procedure ...

Researchers have long considered the Stuxnet attacks on Iran's nuclear centrifuges in Natanz to be the opening chapter of ...

Some fear frontier LLMs like Mythos and OpenAI's GPT-5.5 will lead to cybersecurity annihilation. Ari Herbert-Voss notes this ...

Forgotten integrations, shadow IT, SaaS, and now shadow AI and agents are everywhere, and attackers don't need sophisticated ...

Not nearly as polite as the name suggests, the ransomware gang has impressed researchers with its speed in scaling up ...

Organizations are changing how they support victims of romance scams - with empathy, technology, and teamwork.

Lazarus continues leveraging ClickFix for initial access and data theft, in this case, against Mac-centric organizations and ...

Companies are seeing a significant influx of AI-powered phishing, as cyberattackers progress from small campaigns to 1-to-1 ...

Some 29 people were charged, including a Cambodian senator, and authorities seized more than 500 Web domains tied to fake ...

Anthropic fixed a significant vulnerability in Claude Code's handling of memories, but experts caution that memory files will ...