Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting...
Ravie LakshmananJul 13, 2026Endpoint Security / Cybercrime Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable...
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after...
Ravie LakshmananJul 13, 2026Cybersecurity / Hacking Somewhere right now, a security tool is quietly finding bugs faster than any human...
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite...
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion,...
Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how...
A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security...
Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory...
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with...
