Security
Phishing Attack Uses Stolen Credentials to Deploy LogMeIn RMM
A new phishing attack uses stolen credentials to deploy LogMeIn RMM for persistent access to comprom...
Loading...
Latest News
IT security, updates, and technology intelligence
1Password Introduces Pop-up Warnings for Suspected Phishing Sites
1Password adds pop-up warnings to protect users from suspected phishing sites, enhancing its digital vault and password management security.
Read article
Security
Sandworm's DynoWiper Malware Targets Polish Power Sector
Sandworm's DynoWiper malware targets Polish power sector in attempted cyber attack
Security
ShinyHunters Claims Credit for SSO Vishing Attacks Driving Data Theft and Extortion
ShinyHunters says it is behind ongoing vishing campaigns targeting single sign-on (SSO) accounts for...
Security
Konni Hackers Target Blockchain Engineers With AI Generated PowerShell Malware and OneDrive Themed Persistence
Blockchain engineering teams are now being targeted with a blend of old tradecraft and a new product...
Update
Microsoft: Outlook for iOS may crash or freeze on iPads due to a coding error
Microsoft says Outlook for iOS 5.2602.0 can crash or become unresponsive on iPad. A temporary workar...
Security
Okta SSO Vishing Attacks Use Real-Time Phishing Kits to Steal MFA Codes and Exfiltrate Cloud Data
Okta is warning about custom vishing-focused phishing kits sold "as-a-service" that let attackers or...
Security
CISA Flags Active Exploitation of Four Enterprise Bugs: Versa Concerto, Zimbra, Vite Dev Server, and a Prettier Supply Chain Trojan
CISA's latest KEV additions highlight a pattern security teams cannot ignore: attackers are blending...
Security
Hackers Exploit Critical Telnetd Authentication Bypass to Gain Root Access (CVE-2026-24061)
A newly disclosed critical vulnerability in GNU InetUtils telnetd is already being exploited in the...
Security
U.S. to Deport Venezuelans Convicted of ATM Jackpotting Attacks Using Ploutus Malware
Federal authorities are moving to deport Venezuelan nationals convicted of orchestrating ATM jackpot...
Security
Microsoft Teams Adds Brand Impersonation Warnings to Stop VoIP Vishing Scams Before Users Answer
Vishing has shifted from random robocalls to targeted, scripted attacks that exploit trust in famili...
Security
Pwn2Own Automotive 2026 Ends With 76 Zero Days and $1.047M Paid Out, A Record Signal for EV Charger and IVI Risk
Pwn2Own Automotive 2026 delivered a blunt message to anyone operating modern vehicle ecosystems: the...
Security
Malicious AI VS Code Extensions With 1.5M Installs Steal Source Code, Secrets, and Developer Profiles
The VS Code extension ecosystem is now a frontline supply chain target. Researchers uncovered two AI...
Update
Microsoft shares workaround for Outlook freezes after January Windows updates
Microsoft has published a temporary workaround for classic Outlook freezing after January 2026 Windo...
Security
Patched FortiGate Firewalls Still Hacked via FortiCloud SSO Path, Admins Report Patch Bypass for CVE-2025-59718
FortiGate admins are reporting successful intrusions on devices that are already patched for CVE-202...
Security
FortiGate Firewalls Breached via FortiCloud SSO, Attackers Steal Full Configuration Files and Plant Rogue Admins
Fortinet FortiGate firewalls are being targeted in fast, automated attacks that abuse SSO access to...
Security
SmarterMail Auth Bypass Now Exploited to Reset Admin Passwords and Gain Full Server Control
A newly disclosed SmarterMail flaw is being exploited in the wild to take over administrator account...
Security
Pwn2Own Automotive 2026 Day 2: Researchers Land 29 New Zero-Day Exploits Across EV Chargers, IVI Systems, and Automotive Grade Linux
Security researchers earned $439,250 on the second day of Pwn2Own Automotive 2026 after demonstratin...
Security
AI-Powered Android Click Fraud Malware Uses TensorFlow to Tap Hidden Ads in Stealth WebViews
Security researchers disclosed a new Android.Phantom malware campaign using TensorFlow.js to visuall...