Latest News

Claims that “Microsoft is running one of the largest corporate espionage operations in modern history” face scrutiny as researchers analyze LinkedIn’s browser extension probing

The AI giant is taking action after determining that a macOS code signing certificate may have been compromised.

Law enforcement in the US, UK and Canada identified more than $45 million in cryptocurrency and froze $12 million.

Download links were replaced by a Russian-speaking threat actor to distribute a recently emerged malware named STX RAT.

The malware mimics the legitimate Anthropic installation, relies on DLL sideloading, and cleans up after itself.

The feature allows enterprise users to compose and read end-to-end encrypted messages natively on their mobile devices.

The vulnerability is tracked as CVE-2026-34621 and Adobe has confirmed that it can be exploited for arbitrary code execution.

Other noteworthy stories that might have slipped under the radar: Jones Day hacked, Internet Bug Bounty program paused due to AI, new Mac stealer malware.

A critical-severity flaw could be exploited remotely, without authentication, to take over a vulnerable device.

The US government has warned that Iran-linked hackers are manipulating PLCs and SCADA systems to cause disruption.

Attackers could exploit these vulnerabilities in denial-of-service, information disclosure, and arbitrary code execution attacks.

The critical vulnerabilities affect Chrome’s WebML component and they have been reported by anonymous researchers.

The document provides a behavior-based model of the tactics and techniques employed by fraudsters.

Within nine hours, a hacker built an exploit from the unauthenticated bug’s advisory and started using it in the wild.

New Device Bound Session Credentials render stolen session cookies unusable by cryptographically binding authentication.