Microsoft confirms that the weekend Entra account lockouts were caused by the invalidation of short-lived user refresh tokens ...

In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google's systems, passing all verifications but pointing to a fraudulent page ...

ClickFix attacks are being increasingly adopted by threat actors of all levels, with researchers now seeing multiple advanced ...

A new malware-as-a-service (MaaS) platform named 'SuperCard X' has emerged, targeting Android devices via NFC relay attacks ...

Windows administrators from numerous organizations report widespread account lockouts triggered by false positives in the ...

Public exploits are now available for a critical Erlang/OTP SSH vulnerability tracked as CVE-2025-32433, allowing ...

Cisco has released security updates for a high-severity Webex vulnerability that allows unauthenticated attackers to gain ...

Hackers don't break in—they log in. Credential-based attacks now fuel nearly half of all breaches. Learn how to scan your ...

Google Gemini is testing a ChatGPT-like scheduled tasks feature called "Scheduled Actions," which will allow you to create ...

The Interlock ransomware gang now uses ClickFix attacks that impersonate IT tools to breach corporate networks and deploy ...

Your dashboards say you're secure—but 41% of threats still get through. Picus Security's Adversarial Exposure Validation ...

CISA says the U.S. government has extended MITRE's funding to ensure no continuity issues with the critical Common ...