Fake requests for quotation lure sales and procurement staff to phishing pages, with nearly 73% of RFQ lures targeting ...

FBI warns of midterm election scams using fake PACs, campaign investment pools and phony voter registration pages to steal ...

Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a ...

Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said ...

Stolen AI API keys are powering an autonomous hacking tool sold on criminal forums, Bitsight reports, as AI agent chatter ...

DDoS attack growth strains defenses as botnets, attack-for-hire services and residential proxies drive more sophisticated ...

Active Directory security work went better as a group. David Fuhr on how 27 municipalities hardened their servers in 12 weeks ...

Google expands Android scam protections with smarter message alerts, safer links and safeguards for calls and screen-sharing ...

ServiceNow launches AI Passport to control AI agent permissions at runtime with tools for governance, oversight and cost ...

Microsoft exposes YAM Store, a criminal marketplace selling phishing kits and stolen cloud accounts used in scams across the ...

KGB RAT, a Windows trojan sold from $150 a month, promises webcam access, steals passwords and lets attackers scare victims ...

Cybersecurity job postings hit a four-year low in 2026 as compliance roles gain share and CISO hiring swings, new CyberSN ...