A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

GPT-5.6 Sol deleted user files during the ChatGPT Work launch on July 9 — a behavior OpenAI’s own System Card documented ...

Stop paying per token—here's how to run Claude locally for free.

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...

Rogue Agent, a vulnerability in Google Cloud Dialogflow CX, allowed attackers to control agents and exfiltrate sensitive data.

The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

One of Apple's key manufacturing partners in India has confirmed it was recently the target of a cyberattack that has resulted in confidential Apple documents being leaked on the dark web. Tata ...

The private-equity owners of Accuride Corp.’s U.S. operations have filed for protection from the wheel and wheel-end maker’s creditors and are looking to sell their businesses’ assets. In filings with ...