20 articles
Threat actors are currently exploiting sophisticated ClickFix social engineering campaigns that mimic Google and Cloudflare verification systems to distribut...
SharkLoader, used by an intrusion cluster tracked as StrikeShark to deliver Cobalt Strike Beacon entirely in memory across a wide international footprint.
Organizations collect more cyber risk data than ever, with many still struggling to build a unified view of their exposure. The latest State of Threat Manage...
The vulnerability, discovered by EasyOptOuts co-founder Tyler Murphy, allows individuals with knowledge of the exploit to uncover the real email address mask...
Hackers reportedly gained access to HSIN servers in late May and early June, potentially exposing sensitive but unclassified information.
A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn redirection. The post How We Added WebA...
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPres...
Hackers gained access to Aflac Japan's systems between June 15 and June 25, stealing personal information from the company's policyholder portal.
The attack chain exploits two reported weaknesses in Claude Cowork for Windows.
The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email corres...
Interesting paper: “Cybersecurity Mission Creep.” Abstract: Cybersecurity is experiencing mission creep.
We’re running Patch the Planet, an ongoing collaboration with OpenAI that pairs Trail of Bits engineers directly with more than 30 open-source projects. Its ...
A newly disclosed vulnerability in Argo CD is drawing attention to the security risks of GitOps platforms, with researchers warning that the flaw could allow...
A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes f...
Apple’s Hide My Email privacy feature currently faces a significant flaw that may expose users’ real email addresses, compromising one of iCloud+’s core anon...
Open-source maintainers are receiving more vulnerability reports than they can act on, and a rising share now comes from an AI system working at machine spee...
The Bitdefender 2026 Cybersecurity Assessment Report surveyed over 1,200 professionals across six countries.
Polymarket has built an entire business on predicting the future. So how did it manage to spectacularly fail to predict its own hack?
This activity is part of a large, multi-language campaign that distributes malicious installer archives hosted on spoofed websites, according to a recent rep...
Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker ru...