Bluekit phishing kit adopts browser-in-the-middle for login theft
Bluekit phishing kit adopts browser-in-the-middle for login theft By Bill Toulas June 25, 2026 11:00 AM The Bluekit phishing-as-a-service platform continues to evolve with nearly…
Search
Healthtech firm Xolis suffers data breach impacting 1.4 million people
…Its flagship platform, Dragonfly, analyzes clinical data in real time to help healthcare providers and payers make more informed, consistent decisions on patient care and insurance coverage. On January 22, the company…
New Apple feature automatically changes your compromised passwords
…Apple fixes bug that let the FBI recover deleted Signal messages Over 20,000 Instagram accounts stolen in Meta AI support hack Replace your AI subs: 5 years of GPT, Claude & Gemini…
Apple fixes Beats Studio Buds flaw that let hackers spy on conversations
…memory. "The range of available commands depends on the mobile operating system, but all major platforms support at least initiating and receiving calls," they said, but added that "real attacks are complex…
FBI: Fraudsters use couriers to steal money in crypto scams
…Two years ago, the FBI also warned that couriers were being used to collect cash in various other scams, including, but not limited to, tech support and government impersonation scams. The FBI…
Steam Workshop abused to spread malware via Wallpaper Engine app
…Steam Workshop is a built-in content-sharing platform on Valve's Steam gaming service where users can upload and download community-created content for games and applications. The content includes mods…
NVIDIA confirms GeForce NOW data breach affecting Armenian users
…The issue is limited to systems run by a third-party GeForce NOW Alliance partner based in Armenia. We are working closely with the partner to support their investigation and resolution. Impacted…
Critical vm2 sandbox bug lets attackers execute code on hosts
…and JSTag support. vm2 is an open-source Node.js library used to run untrusted JavaScript code inside a restricted sandbox environment. It is commonly employed by online coding platforms, automation tools…
Chinese APT deploys new malware to keep access to hacked networks
…Plenet, also tracked as “Grimbolt” by Google, is a cross-platform .NET-based backdoor that offers interactive shell access, remote command execution, file manipulation, and command-and-control (C2) server switching. The…
Identity Alone Isn't Enough: Why Device Security Has to Share the Load
…Identity is being forced to carry a structural burden it was never designed to support. While identity isn’t obsolete, in ecosystems defined by SaaS sprawl, BYOD, and hybrid work, a valid…