Mysterious AI model Ox Alpha has appeared on OpenRouter as a free stealth model for coding, AI agents, and production ...

ReliaQuest disclosed a social engineering attack impersonating security staff to lure employees to a fake SSO page.

Exposed AWS Credentials Still Grant Full Admin Access, Highlighting Poor Credential Rotation and Cloud Monitoring.

Kimsuky uses phishing and a malicious Chrome extension to steal Gmail messages, attachments, and control infected computers.

AmnesiaStealer targets Macs via fake GitHub pages, stealing passwords, browser sessions, crypto data, and sensitive files.

Fake CAPTCHA pages trick Mac users into pasting malicious Terminal commands, enabling password theft, remote control, and ...

Android malware targets car infotainment systems via trusted software updates, turning vehicle screens into ad-fraud and ...

Fake Adobe Acrobat sites are hiding malware-as-a-service panels, using document lures to target Windows users with harmful ...

Malicious npm packages hide a Linux backdoor in calendar tools, using legitimate date functions to deliver RedShell into ...

Hackers poison Google and Bing results with fake banking pages, tricking customers into entering passwords and hijacking sessions.

AWS has introduced rule hit count support for AWS Network Firewall, giving security teams direct visibility into which ...

A ransomware affiliate weaponized Claude Code to autonomously steal LDAP credentials, backdoor VPNs, and exfiltrate SQL ...