Browser fingerprinting lets websites see you even after you disable every cookie.

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

OWAReaper abuses CVE-2026-42897 to steal OAuth tokens, alter mailbox permissions, and persist inside Exchange accounts.

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

Convex is not the only application backend on the market. According to the company, one of its platform’s main ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites ...

The sign-in prompt in Office 365 or Microsoft 365 desktop apps may say device TPM problem, Trusted Platform Module ...

A new heart ablation procedure being used across UCHealth to control atrial fibrillation is helping doctors treat more ...

CryptoJS's weak RNG made recovery phrases guessable across five wallet apps, enabling Ill Bloom thefts totaling at least $5.69 million in two sweeps.

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

OpenAI's cybersecurity incident demonstrates why autonomous AI is changing cyber risk and why verifiable security has become more important than ever.