Microsoft confirms that the weekend Entra account lockouts were caused by the invalidation of short-lived user refresh tokens ...

ClickFix attacks are being increasingly adopted by threat actors of all levels, with researchers now seeing multiple advanced ...

A new malware-as-a-service (MaaS) platform named 'SuperCard X' has emerged, targeting Android devices via NFC relay attacks ...

Public exploits are now available for a critical Erlang/OTP SSH vulnerability tracked as CVE-2025-32433, allowing ...

Windows administrators from numerous organizations report widespread account lockouts triggered by false positives in the ...

In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google's systems, passing all verifications but pointing to a fraudulent page ...

The Interlock ransomware gang now uses ClickFix attacks that impersonate IT tools to breach corporate networks and deploy ...

Cisco has released security updates for a high-severity Webex vulnerability that allows unauthenticated attackers to gain ...

Hackers don't break in—they log in. Credential-based attacks now fuel nearly half of all breaches. Learn how to scan your ...

Google Gemini is testing a ChatGPT-like scheduled tasks feature called "Scheduled Actions," which will allow you to create ...

Your dashboards say you're secure—but 41% of threats still get through. Picus Security's Adversarial Exposure Validation ...

A set of 57 Chrome extensions with 6,000,000 users have been discovered with very risky capabilities, such as monitoring browsing behavior, accessing cookies for domains, and potentially executing ...