Android attackers use fake apps and droppers to spread the Wonderland SMS stealer, stealing OTPs, SMS data, and bank funds, ...

Purdue’s PDID benchmark tests deepfake tools on real social media content, showing why false-acceptance rates matter for enterprise security.

Iranian APT Infy resurfaced after years of silence, using updated Foudre & Tonnerre malware, phishing delivery, resilient C2 ...

The DOJ charged 54 people over Ploutus malware attacks on ATMs, linked to Tren de Aragua, causing $40.73 million in U.S.

A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked ...

Nigeria police arrested the alleged RaccoonO365 phishing developer after a probe with Microsoft and the FBI, tied to stolen ...

UEFI firmware flaws in certain ASRock, ASUS, GIGABYTE, and MSI motherboards allow early-boot DMA attacks before OS security ...

WatchGuard fixed CVE-2025-14733, a critical Fireware OS VPN flaw with CVSS 9.3 that is actively exploited in the wild.

Researchers uncover malware campaigns using cracked software and compromised YouTube videos to deliver CountLoader, ...

A Google Chrome extension with a "Featured" badge and six million users has been observed silently gathering every prompt ...

HPE patched a critical OneView vulnerability with CVSS 10.0 that could allow unauthenticated remote code execution in ...

Chainalysis reports North Korea-linked hackers stole $2.02B in crypto in 2025, accounting for most global thefts and major ...