A suspected ShinyHunters member known as Rey was reportedly detained in Jordan and is said to be cooperating with the FBI.

TA419 targets U.S. AI policy experts with reply-triggered AitM phishing that captures Microsoft credentials and session ...

MI5 says more than 100 U.K.-linked academics contributed to MSS-funded research via CGTRI, which it assesses as an MSS front.

Warlock exploited SharePoint flaws in attacks on at least four organizations, including two critical infrastructure operators ...

Cybersecurity teams are shifting toward continuous control across identity, cloud, endpoints, telemetry, and human risk.

Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, ...

China-nexus UAT-11587 targets Asian government and policy groups with Antino, a Rust backdoor that uses Microsoft 365 for C2.

Dell fixes six CSM flaws enabling authentication bypass, storage credential access, and cluster-wide privilege escalation.

OpenAI parted ways with three safety researchers after finding they mishandled sensitive information, reportedly tied to infrastructure architecture.

Exposure-based board reporting maps attack paths across security tools and ties critical assets to financial risk and quarterly trends.

Android 17 limits accessibility service access under Advanced Protection to verified Accessibility Tools, blocking a major malware abuse path.

Fortinet says attackers are exploiting a FortiMail flaw that lets unauthenticated users write arbitrary files via crafted HTTP requests.