Active malware exploits DLL side-loading in a signed GitKraken binary to deliver trojans, stealers, and remote access malware ...

Cisco released fixes for CVE-2025-20393, a CVSS 10.0 zero-day RCE flaw in AsyncOS exploited by a China-linked APT via email ...

The past two years have brought a lot of new computer-security deployments at CERN. Spurred on by the 2023 cybersecurity audit, the Computer Security ...

Control over personal photo archives stored in Apple’s iCloud has taken on sharper relevance as users look for greater autonomy over their data, and a small open-source project has emerged as a ...

A new WhatsApp Web malware campaign spreads automatically, steals banking data, and targets Windows users through trusted ...

Security firm Mandiant has released a database that allows any administrative password protected by Microsoft’s NTLM.v1 hash ...

Explore the pros and cons of passwordless authentication for b2b tech. Learn how mfa and ciam shifts impact security and user experience.

ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push ...

Microsoft’s investigation into RedVDS services and infrastructure uncovered a global network of disparate cybercriminals ...

Critical105Important0Moderate0LowMicrosoft addresses 113 CVEs in the first Patch Tuesday of 2026, with two zero-days, ...

The device supports universal second-factor authentication and passwordless login, offering an alternative to proprietary ...