ANY.RUN uncovers a 46-country phishing campaign using fake tax documents, Vercel infrastructure, and legitimate RMM software ...

Kerberos unconstrained delegation is one of those Active Directory configurations that can sit quietly for years and still create a disproportionate amount of risk. It is often introduced to make a ...

Former cybercriminal Brett Johnson clues us in to the mind of a cyberattacker and how AI could reshape cybercrime.

Blind Eagle-linked hackers target Colombia with phishing emails, password-protected archives, and malware to evade detection ...

Threat actors are increasingly exploiting overlooked Active Directory service principal name misconfigurations, making ...

PEEP Google Chrome extension steals login sessions and turns compromised Windows devices into remote backdoors.

CyberPress weekly cybersecurity newsletter and cybersecurity bulletin covering the top 50 cyber security stories from August ...

RevStealer malware is being distributed through trojanized Electron applications, as a free desktop version of Anthropic’s ...

Multiple crypto industry figures and CoinDesk staff received unexpected password reset emails on Tuesday, though there is no ...

X users have spent the past several weeks getting password reset emails they never asked for, including a massive rush of ...

A password reset attack hit X (Twitter) on Tuesday. X found no breach and blames attackers chasing X Money wallets.

The Federal Bureau of Investigation issued the warning about a technique known as OAuth consent phishing, according to ...