Mirage2FA uses AiTM phishing to steal Microsoft 365 credentials and authenticated sessions, bypassing conventional MFA and ...
WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...
An advanced malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with ...
A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and ...
The Palestinian embassy in London says Hossam Al-Khawas died in the incident in Shoreham, as a young girl from the same ...
The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
SilkParasite targets Central Asian governments with seven RATs, five newly documented, using DLL sideloading and likely ...
SvelteKit has been nipping at Next.js’ heels for a while. A recent benchmark found that SvelteKit’s Server Side Rendering ...
A phishing campaign targeting cybersecurity conference attendees has been using Google Docs and other familiar online services to deliver malware, including a Windows payload that can install its own ...
A spoofed CCleaner download site is spreading a multi-stage malware that hijacks Chrome to steal credentials, cookies, and authentication tokens while recording keystrokes and screenshots.
keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion monthly downloads. The Wave Six payload hid inside AI agent config files ...
The Palestinian embassy in London says Hossam Al-Khawas died in the incident in Shoreham, as a young girl from the same ...