A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time.

UNC6671 uses vishing and AitM phishing to steal cloud credentials and MFA tokens, then exfiltrate data from Microsoft 365, ...

Cybercriminals are targeting major Wall Street firms like Blackstone and KKR, using simple IT help desk phone scams to steal ...

At Black Hat, Google's Project Zero team showed how hackers can turn your Pixel into a silent bugging device in minutes—no ...

This attack, dubbed Pass-Ta-Key by Unit 42, can mimic how Chrome and Google Password Manager interact to falsify a passkey ...

Maybe feeling left out from the questionable hype train of “Our AI models can’t be trusted”, Anthropic has released reports that their Claude model has “reached the ...

Researchers at Unit 42 recently detailed three methods by which malware on a PC can read passkey data stored in Google Chrome ...

Security researchers exploited vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobile ...

A flaw in Coldcard wallets cost Bitcoin holders more than $100 million—and reopened an old fight about whether you can trust ...

Flare researchers analyzed thousands of underground posts to examine how the BTMOB Android malware operation evolved into a ...

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a recruiter call, or a familiar service behaving slightly wrong. Behind ...

OpenAI has shared additional details about how its models independently breached Hugging Face's internal systems. The models used publicly exposed credentials across "four accounts on four services" ...