Cybercriminals are promoting malicious Microsoft OAuth apps that masquerade as Adobe and DocuSign apps to deliver malware and ...

A widespread phishing campaign has targeted nearly 12,000 GitHub repositories with fake "Security Alert" issues, tricking developers into authorizing a malicious OAuth app that grants attackers full ...

CISA says the Medusa ransomware operation has impacted over 300 organizations in critical infrastructure sectors in the ...

Security researcher Yohanes Nugroho has released a decryptor for the Linux variant of Akira ransomware, which utilizes GPU ...

A large-scale Coinbase phishing attack poses as a mandatory wallet migration, tricking recipients into setting up a new ...

The Black Basta ransomware operation created an automated brute-forcing framework dubbed 'BRUTED' to breach edge networking ...

Microsoft says it partially mitigated a week-long Exchange Online outage causing delays or failures when sending or receiving ...

Cisco has patched a denial of service (DoS) vulnerability that lets attackers crash the Border Gateway Protocol (BGP) process ...

A dual Russian-Israeli national, suspected of being a key developer for the LockBit ransomware operation, has been extradited ...

Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been ...

Microsoft is now testing an AI-powered text summarization feature in Notepad and a Snipping Tool "Draw & Hold" feature that ...

A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party ...