Android attackers use fake apps and droppers to spread the Wonderland SMS stealer, stealing OTPs, SMS data, and bank funds, ...

Purdue’s PDID benchmark tests deepfake tools on real social media content, showing why false-acceptance rates matter for enterprise security.

Iranian APT Infy resurfaced after years of silence, using updated Foudre & Tonnerre malware, phishing delivery, resilient C2 ...

The DOJ charged 54 people over Ploutus malware attacks on ATMs, linked to Tren de Aragua, causing $40.73 million in U.S.

A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked ...

Researchers uncover malware campaigns using cracked software and compromised YouTube videos to deliver CountLoader, ...

CISA adds a critical ASUS Live Update vulnerability to its KEV list, citing active exploitation linked to a past supply chain ...

UEFI firmware flaws in certain ASRock, ASUS, GIGABYTE, and MSI motherboards allow early-boot DMA attacks before OS security ...

Nigeria police arrested the alleged RaccoonO365 phishing developer after a probe with Microsoft and the FBI, tied to stolen ...

WatchGuard fixed CVE-2025-14733, a critical Fireware OS VPN flaw with CVSS 9.3 that is actively exploited in the wild.

HPE patched a critical OneView vulnerability with CVSS 10.0 that could allow unauthenticated remote code execution in ...

SonicWall released fixes for an actively exploited SMA 100 vulnerability enabling privilege escalation and chained root ...