A spoofed CCleaner download site is spreading a multi-stage malware that hijacks Chrome to steal credentials, cookies, and authentication tokens while recording keystrokes and screenshots.

The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...

China-linked Jewelbug uses XG-Web for espionage and crypto fraud, stealing over 580,000 browser cookies and thousands of ...

WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...

We tend to picture courage as a personal virtue: an officer who runs toward danger, a bystander who steps in alone–a brave act by a brave actor. What I watched ...

The next time a flight fare you were quoted yesterday costs more when you return to book today, there may be more than market demand at work — and Congress wants to know exactly how much. House Energy ...

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.

OpenAI on Monday announced a new purpose-trained cybersecurity model, GPT-5.6-Cyber, and restructured its Daybreak program into two access tiers — but the most significant part of the announcement was ...

Jewelbug, a China-linked hack-for-hire group, breached 15 government ministries at once by inserting one script into a shared ...

Spread the loveEver found yourself scratching your head when a website just isn’t behaving? Maybe your shopping cart empties ...