A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...

Crushing ice for a frozen cocktail? Reach for a full-sized blender. Need a quick smoothie for your morning commute? Break out your personal-sized blender, then hit the road with its on-the-go jar. But ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

This tactic relies on a simple weak point: trust. The malicious file is sent by someone you know, using their stolen account.

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...

Cybersecurity firm Novee has identified a GitHub Actions workflow-chain risk that can expose secrets even when checks pass, ...