Researchers detail new AI and phishing kits that steal credentials, bypass MFA, and scale attacks across major services.

Threat actors include Scattered Spider (UNC3944), Black Basta, RansomHub, and NoEscape. TTPs comprise SIM-swapping to bypass multi-factor authentication (MFA), compromise of cloud and SaaS-based ...

The IT security organizations CERT-FR and CISA have compiled tips for securing smartphones. They go a bit too far.

New SantaStealer malware reportedly threatens holiday shoppers with password theft. This Christmas-themed info-stealer ...

Cybercriminals have launched a widespread phishing campaign exploiting Microsoft's OAuth device code flow to bypass MFA and ...

Experts at Kaspersky have discovered that the Stealka stealer is disguised as game cracks, cheats, and mods. In addition to ...

A cybersecurity company has found a new method for taking over WhatsApp accounts that exploits the app's legal device-linking ...

This is not as easy as it sounds — and it’s not common advice. But there’s a new warning for iPhone and Android users to ...

Windows users can protect themselves from falling victim to ongoing “hack your own password” attacks by doing these three ...

Hackers are exploiting critical-severity vulnerabilities affecting multiple Fortinet products to get unauthorized access to ...