Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

The in-the-wild exploitation of four Microsoft SharePoint vulnerabilities has come to light in the past month.

Rapid7 pulls 1,048 files from an exposed server, linking an LLM-assisted phishing pipeline to a live WebDAV campaign ...

X is making it easier for AI assistants like Claude, Cursor, Grok Build, and other MCP-compatible apps to connect directly to the platform through a new hosted MCP server. On Monday, the Elon ...

One of Apple's key manufacturing partners in India has confirmed it was recently the target of a cyberattack that has resulted in confidential Apple documents being leaked on the dark web. Tata ...

Iran’s Islamic Revolutionary Guard Corps attacked a Singapore-flagged cargo ship Thursday in the Strait of Hormuz, according to two senior U.S. officials, testing the deal signed last week by the U.S.

President Trump on Friday called Iran’s attack on a container ship transiting the Strait of Hormuz a day earlier a “foolish” act. By Helene Cooper Euan Ward Jenny Gross and Pranav Baskar Helene Cooper ...

The Federal Bureau of Investigation has issued a warning about cyber criminals increasingly exploiting traffic distribution systems (TDS) to redirect internet users to fraudulent websites and deploy ...