A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

Crypto users are facing a new security threat via fake Cloudflare CAPTCHA pages. The attack installs an infostealer built to siphon crypto wallet data.

Vulnerability attacks rose 56% in 2025. Explore 46 statistics on CVE disclosure, exploitation patterns, and industry impact to guide your 2026 security strategy. The post 46 Vulnerability Statistics ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Roblox has exploded in popularity over the past few years, attracting millions of players and developers worldwide. With this ...

Something to look forward to: Microsoft released new Windows 11 Insider Preview builds to the Canary, Dev, and Beta channels this week, bringing multiple new features for developers and power users.

Shortly after the release of macOS 26.4 Tahoe (see “ OS 26.4 Adds AI-Generated Playlist Playground, Separates Family Sharing Purchases,” 25 March 2026), several TidBITS Talk users began reporting ...

Costa Mesa officials say a beloved animal rescue group hired to open and operate a shelter for the city failed to make adequate progress over the past two years, warranting a 60-day notice demanding ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how quickly a compromised package can propagate through the ecosystem.