Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect ...

A developer noticed that AliExpress uses the Web Audio API to identify devices via inaudible audio signals. The question is: ...

China-linked Jewelbug uses XG-Web for espionage and crypto fraud, stealing over 580,000 browser cookies and thousands of ...

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion monthly downloads. The Wave Six payload hid inside AI agent config files ...

The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...

A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft ...

McKinsey’s latest State of AI report revealed that 62% of organizations have started experimenting with AI agents in some form. However, Gartner expects over 40% of these projects to be scrapped by ...

For most of the web's history, scraping a defended site at scale was a craft. It meant reverse engineering obfuscated ...

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its ...

Mirage2FA uses AiTM phishing to steal Microsoft 365 credentials and authenticated sessions, bypassing conventional MFA and ...

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

Five layers of a 2026 phish, two studies three years apart, and the tells that replaced the ones you were taught. In October 2022, Osterman Research published a study we commissioned, The Business ...