Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

NovaCookies proxies Microsoft 365 sign-ins through attacker infrastructure to steal sessions using Docusign lures and OAuth ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.

An advanced malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with ...

Blocklists were already losing ground before AI entered the picture. Phishing domains have been getting shorter-lived for years, campaigns have been burning infrastructure faster, and the gap between ...

The built-in web fetch was never the bottleneck I thought it was, until I swapped it for a free tool.

All of the content of this internet site is owned or controlled by American Chemical Society. These Terms of Use and Legal Disclosures (“Terms of Use” or “Terms ...

Microsoft 365 phishing campaign disclosed by Arctic Wolf Labs abuses Google Meet and Amazon S3 to bypass enterprise email filters. Standard MFA provides no protection as attackers steal session tokens ...

A phishing page designed to evade security tools accidentally broke its own credential-stealing operation after a coding ...

Cybersecurity researchers have uncovered 24 malicious npm packages that abuse package mirror services to host obfuscated ...

A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft ...