Securonix Threat Research has analyzed TRUST#GRAFT, an attack chain that uses fake Cloudflare verification pages to turn ...

From the summer to the autumn of 2026, news reporting the leakage of personal information has appeared almost every week. A sentence that has become common in explanations of the cause is, 'The ...

Since the end of September 2026, there has been a series of announcements regarding unauthorized access and information leaks ...

A hacker claiming responsibility for the breach of Denmark's Central Register of Persons (CPR) says it was protected by "123456," a password that has topped most-common-password lists for years.

CVE-2026-61500 is a critical authentication bypass in Rejetto HTTP File Server, discovered by Anthropic Mythos AI and exploited within 24 hours of public disclosure by a China-linked actor targeting ...

TIKTOUK targets exposed WordPress backups to steal cloud and email credentials, with 50,000 credentials found across 37,000 domains.

Fake Zoom installers trick Mac users into revealing passwords and deploy CloudSyncD backdoor, with active command servers detected.

When it comes to keeping your online accounts safe and sound, two-factor authentication (2FA) has been a standard recommendation from security experts worldwide for years. As more and more people ...

Social media can provide instant access to large audiences and selected communities. It has helped some to stay connected during times of societal challenge, such as the pandemic and other disasters.

Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are ...

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The operation has been ...