… Download Now Related Articles: Ukraine identifies infostealer operator tied to 28,000 stolen accounts Paid AI Accounts Are Now a Hot Underground Commodity Hackers abuse Google ads, Claude.ai chats to push Mac malware Australia warns of ClickFix attacks pushing Vidar Stealer malware Fake Claude AI w… …
… Download Now Related Articles: Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks Race Against Time: Why Faster Vulnerability Alerts Matter Disgruntled r… …
OpenAI confirms security breach in TanStack supply chain attack By Lawrence Abrams May 14, 2026 03:07 PM OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and PyPI packages, causing the company to rotate code-signing certificat… …
… In the first stage, Seedworm performed host and domain reconnaissance, followed by antivirus enumeration via WMI, screenshot capture, and the download of additional malware. Credential theft occurred via fake Windows prompts, registry hive theft SAM/SECURITY/SYSTEM , and Kerberos ticket abuse tools. …
… Download the complete 2026 Microsoft Vulnerabilities Report now for detailed analysis of Microsoft's vulnerability and security landscape—and what it all means for you. Authors Morey J. Haber, Chief Security Advisor, BeyondTrust Morey J. Haber is the Chief Security Advisor at BeyondTrust. …
… Tycoon2FA adds device-code phishing According to new research from managed detection and response company eSentire, Tycoon2FA confirms that device code phishing has become highly popular among cybercriminals. “The attack begins when a victim clicks a Trustifi click-tracking URL in a lure email and … …
… Another worm module abuses Microsoft Outlook through COM automation, launching the app, harvesting contacts and sender addresses, and sending phishing emails through the victim’s email account. …
… Download Now Related Articles: FBI warns against using Chinese mobile apps due to privacy risks ScarCruft hackers push BirdCall Android malware via game platform Telegram Mini Apps abused for crypto scams, Android malware delivery 'NoVoice' Android malware on Google Play infected 2.3 million device… …
… Security researchers at Arctic Wolf reported on Kali365 activity in April after observing a widespread campaign targeting organizations worldwide. …
… Security firms StepSecurity , Aikido Security , and Socket warned about the compromise on Friday, warning that attackers had rewritten GitHub tags across four repositories maintained by the Laravel Lang organization rather than publishing entirely new malicious versions. …