An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Faraday Future Founder and Global CEO YT Jia Shares Weekly Investor Update: Provides New Details on FF’s EAI Data Factory, Q3 “Four-Core Full-Stack AI” Robotics Practical Deployment Campaign and EAI ...

A malicious Microsoft Edge extension dubbed ‘Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. Access to the local system is obtained ...

Iran’s Natanz nuclear facility was buried underground, sealed off from the internet, and protected by thick concrete walls, ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...