Browser-based identity attacks surge in 2025, targeting SaaS apps and weak credentials across enterprise accounts.

A massive mobile malware campaign targets Android and iOS users in Asia, stealing personal data through fake apps.

JavaScript injection attacks surged in 2024, hitting major brands via Polyfill.io. Learn why frameworks failed.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security vulnerability ...

In what's the latest instance of a software supply chain attack, unknown threat actors managed to compromise Toptal's GitHub ...

Legacy email filters miss post-delivery threats in Microsoft 365 and Google Workspace, exposing data. Here's how EDR-style ...

Scattered Spider targets VMware ESXi in fast, stealthy ransomware attacks across U.S. retail and airline sectors.

This is why Endpoint Detection and Response (EDR) is really only one piece of the endpoint protection puzzle. It offers key ...

Tridium Niagara flaws expose critical infrastructure to takeover if misconfigured, affecting security and system uptime.

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) sanctioned a North Korean front company and three associated individuals for their involvement in the fraudulent remote ...

Patchwork targets Turkish defense firms with LNK phishing to steal UAV, missile data amid geopolitical tension.

Russian defense firms hit by cyberattacks using EAGLET malware via phishing lures; threat actors linked to Head Mare and ...