An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

Digital security is crucial for journalists in Bangladesh ahead of the 2026 elections. Learn about risks and protective ...

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026. ClickFix – a social engineering technique leveraging fake error messages – has expanded into ...

Bill Toulas is a tech writer and infosec news reporter with over a decade of experience working on various online publications, covering open-source, Linux, malware, data breach incidents, and hacks.

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...

With the ability to take control of distributed devices at scale, HalluSquatting has the potential to achieve various ...

Anthropic’s AI-run espionage report shows why enterprises need stronger governance for AI agents, MCP connectors, and ...

Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...