In 2024, dormant accounts, unmanaged SaaS access, and GenAI permissions expose enterprises to data breaches and insider ...

OpenAI banned ChatGPT accounts tied to Russian, Chinese, and Iranian hackers using AI for malware and influence campaigns.

IAM audit compliance does not have to be a daunting endeavor. Many tools available in the market can ease the burden of ...

Supply chain attack infects 16 GlueStack npm packages used by 1M weekly users, enabling malware that steals data and controls ...

A phishing campaign infects 722 users with malicious browser extensions in Latin America to steal bank login data.

A new malware campaign tricks macOS users with fake Spectrum CAPTCHA sites to steal passwords and deliver Atomic Stealer ...

The Zscaler ThreatLabz team has been tracking AI and machine learning (ML) traffic across enterprises, and the numbers tell a compelling story. In 2024 alone, ThreatLabz analyzed 36 times more AI and ...

AEV automates continuous attack simulations for organizations, helping prioritize exploitable risks and improve cyber ...

Then a couple of weeks ago, ESET noted that APT28 had leveraged cross-site scripting (XSS) vulnerabilities in various webmail servers such as Roundcube, Horde, MDaemon, and Zimbra to harvest ...

PathWiper malware hit Ukraine’s critical systems in 2025, wiping data via admin console access and worsening conflict-driven ...

Fake Gitcode and DocuSign sites are tricking users into running PowerShell scripts that install NetSupport RAT.

Several popular Chrome extensions send sensitive user data over unencrypted HTTP, exposing millions to interception and privacy risks.