A new wave of phishing attacks exploiting Microsoft 365 OAuth tools has been observed impersonating diplomats to steal access ...

Microsoft has observed three China-based threat actors, Linen Typhoon, Violet Typhoon and Storm-2603, exploiting the ...

A sophisticated and widespread Request for Quote (RFQ) scam using net financing terms has been uncovered by threat ...

The UK government said a public consultation showed widespread support on a payment ban for public sector and CNI ...

Abnormal AI found that 96% of security leaders have no plans to reduce the headcount in SOC teams as a result of AI adoption, ...

Despite being a rebrand of several ransomware families, GLOBAL GROUP innovated with the use of an AI chatbot in the negotiation process ...

Australia’s financial regulator has launched legal action against financial services firm Fortnum Private Wealth for allegedly exposing its clients to unacceptable cybersecurity risks.

This is the second time in 2025 that a CrushFTP vulnerability has been observed being exploited in the wild, following the ...

New samples of DCHSpy, a spyware implant linked to Iranian APT group MuddyWater, have been detected by Lookout ...

On-prem SharePoint customers have been told to assume compromise, with attackers observed to be exfiltrating data from victim ...

An attack on a US accounting firm delivered PureRAT via Ghost Crypt, involving social engineering and advanced obfuscation ...

An investigation has revealed novel scams using tools like MaisonReceipts, creating realistic fake receipts to resell stolen ...