Threat actors have been seen abusing Google Apps Script to launch convincing phishing attacks and steal people’s Microsoft ...

Threat actors are abusing the trusted Google platform 'Google Apps Script' to host phishing pages, making them appear ...

According to new research from Cofense, a new attack has been discovered where, if an employee clicks on a link in a phishing ...

Unit 42 found a website spoofing a known German modelling agency The site carries obfuscated JavaScript which exfiltrates ...

Continuing on API client security, we cover more sandbox bypasses, this time in Bruno and Hoppscotch, as well as JavaScript ...

New Rust-based EDDIESTEALER spreads via fake CAPTCHA pages, stealing credentials and bypassing Chrome encryption.

A Google Chrome Web Store campaign uses over 100 malicious browser extensions that mimic legitimate tools, such as VPNs, AI ...

In this post, we analyze an open-source CAPTCHA solver designed to bypass a custom challenge deployed on Binance, one of the ...

Perplexity, an AI search biz, has launched Perplexity Labs, a project automation service capable of generating basic apps and ...

On Thursday, security firm ESET reported that Sednit, a Kremlin-backed hacking group also tracked as APT28, Fancy Bear, ...

Latest research highlights that cybercriminals are finding more success in low-tech, high-impact, human-centric tactics.

BitMEX has pulled the curtain back on a failed hack attempt by the Lazarus Group, exposing sloppy mistakes by a collective ...