A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.

Security researchers at Cybernews discovered on June 12 what they describe as one of the largest credential databases ever left exposed online — a publicly accessible Elasticsearch cluster holding 24 ...

The acquisition comes as Mercor says it reached $2 billion in annual recurring revenue despite a high-profile cybersecurity ...

Cybernews researchers discovered an exposed database containing 24 billion records, including usernames, email addresses, plaintext passwords, and login URLs. The data appears to come from infostealer ...

Today:Early fog in the far southwest clears quickly. Most areas stay dry with sunshine and variable cloud, though northern and northeastern regions may see isolated showers. Light winds overall, ...

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...