Twelve npm packages hijacked via compromised maintainer accounts to exfiltrate secrets using obfuscated scripts.

DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishing kit, and the related activity under the ...

Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after ...

The fraudulent website mimicking India Post is named "postindia [.]site." Users who land on the site from Windows systems are ...

RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.

PJobRAT malware targeted Taiwanese Android users via fake chat apps from Jan 2023 to Oct 2024, enabling deep surveillance and remote control.

VMware Tools flaw CVE-2025-22230 enables high-privilege actions on Windows VMs + No workaround + Patch in 12.5.1.

An ongoing campaign that infiltrates legitimate websites with malicious JavaScript injects to promote Chinese-language ...

CISA adds Sitecore flaws CVE-2019-9874 and CVE-2019-9875 to KEV amid active exploitation and agency patch mandates.

Traditional CASB tools miss 100% of shadow SaaS threats—browser-based security offers real-time visibility and control.

SnapCenter is an enterprise-focused software that's used to manage data protection across applications, databases, virtual ...

Simple, reused, or improperly stored passwords remain a major weak link for many organizations. PAM solutions can secure ...