UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

Researchers found a phishing service relaying live Google sign-in sessions to intercept passwords, 2FA codes, and active ...

Google has patched 230 vulnerabilities on Tuesday, including another actively exploited Chrome zero-day bug, the seventh such ...

Over 5,400 legitimate websites now serve fake CAPTCHA scams that trick users into pasting malware commands into Windows Run ...

Anthropic says it has blocked efforts to use its artificial intelligence models to carry out cyber attacks and research which could have led to the creation of biological weapons.

BlueMoon chains Chrome and Windows zero-days to escape the browser sandbox, elevate privileges, and deliver malware on ...

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing ...

The Quebec government has decided that citizens won’t receive English-language information about voting in the upcoming ...

Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion ...

Introduction to Modern SSO Challenges Isn't it annoying how many passwords we need these days? Single Sign-On (SSO) was supposed to fix that, but sometimes it feels like it just moved the problem ...

Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.