A single malicious URL can hijack Comet AI browser, exfiltrating emails, calendar, and user memory via encoded payloads.

The company said it observed a nearly 500% increase in IP addresses scanning Palo Alto Networks login portals on October 3, ...

Infoblox's analysis has revealed that at least 69% of the confirmed StarFish staging hosts were under the control of Detour ...

Rhadamanthys MaaS stealer (v0.9.2) expands fingerprinting, PNG steganography, and tiered pricing from $299–$499/month.

WhatsApp malware SORVEPOTEL infects 477 systems in Brazil, spreading via phishing ZIP files and spamming contacts.

Passwork 7 unifies password and secrets management with enhanced usability, granular access, and ISO 27001 compliance.

Cybersecurity vendor BI.ZONE is tracking the activity under the moniker Cavalry Werewolf. It's also assessed to have ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a high-severity security flaw impacting ...

Confucius hackers target Pakistan with WooperStealer and Anondoor malware using phishing and DLL side-loading.

Malicious PyPI package soopsocks downloaded 2,653 times before takedown, exfiltrating Windows data to Discord.

Automated workflows accelerate pentest delivery, cut delays, and ensure real-time vulnerability remediation visibility.

Google Mandiant tracks FIN11’s high-volume extortion emails exploiting Oracle E-Business Suite, possibly linked to Cl0p.