Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-branded phishing sites that steal single sign-on (SSO) ...
This is Part 2 of our two-part technical analysis on the Gopher Strike and Sheet Attack campaigns. For details on the Gopher Strike campaign, go to Part 1.IntroductionIn September 2025, Zscaler ...
The North Korean threat group is using a new PowerShell backdoor to compromise development environments and target ...
North Korean group Konni uses AI-assisted PowerShell malware and phishing via Google ads and Discord to breach blockchain ...
A new malicious campaign mixes the ClickFix method with fake CAPTCHA and a signed Microsoft Application Virtualization (App-V ...
ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation.
Put rules at the capability boundary: Use policy engines, identity systems, and tool permissions to determine what the agent ...
From the Department of Bizarre Anomalies: Microsoft has suppressed an unexplained anomaly on its network that was routing ...
This case study examines how vulnerabilities in AI frameworks and orchestration layers can introduce supply chain risk. Using ...
A new breed of malware uses various dynamic techniques to avoid detection and create customized phishing webpages.
What's CODE SWITCH? It's the fearless conversations about race that you've been waiting for. Hosted by journalists of color, our podcast tackles the subject of race with empathy and humor. We explore ...
Businesses must convince customers their personal data is safe. Run a cybersecurity risk assessment to protect company and customer data.