"In 2023, UNC3782 conducted phishing operations against TRON users and transferred more than $137 million USD worth of assets ...

Cybersecurity researchers have revealed that Russian military personnel are the target of a new malicious campaign that ...

Messaging apps such as Signal and WhatsApp are used to contact targets, inviting them to join a video call or register for ...

xrpl.js is a popular JavaScript API for interacting with the XRP Ledger blockchain, also called the Ripple Protocol, a ...

Lotus Panda breached 6 Southeast Asian organizations using custom tools, browser stealers, and sideloaded malware.

Google scraps new third-party cookie prompt in Chrome + boosts Incognito protections + DOJ eyes Chrome breakup.

This involves deploying a malware strain that connects to a nascent Web3 service called Teneo, a decentralized physical ...

Phishers abused Google Sites and DKIM replay to send valid-signed emails, bypassing filters and stealing credentials.

From zero-click iOS exploits to NTLM credential leaks and the 4Chan breach — this week’s cyber threats hit where trust runs ...

"In some systems, initial access was gained through exploiting the RDP vulnerability (BlueKeep, CVE-2019-0708)," the South ...

GCP’s ConfusedComposer flaw let attackers escalate privileges via PyPI packages; patched by Google on April 13.

Microsoft secures MSA and Entra ID with Azure Confidential VMs + HSM, preventing token forgery and reducing breach risks.