A dramatic spike in npm-focused intrusions shows how attackers have shifted from opportunistic typosquatting to systematic, credential-driven supply chain compromises — exploiting CI systems, ...

Visitors to your website might want directions to your store via Google Maps, a roundup of your social media feeds, and a ...

Targeted email scams are getting bolder and more convincing. Here's how they work, and the smartest ways to defend yourself. I review privacy tools like hardware security keys, password managers, ...

AI giant OpenAI has revealed its API metadata was exposed in a security breach. A phishing incident at third-party data analytics provider Mixpanel compromised user details, including names, email ...

OpenAI is notifying some ChatGPT API customers that limited identifying information was exposed following a breach at its third-party analytics provider Mixpanel. Mixpanel offers event analytics that ...

The phishing attacks have left agencies and advertisers scrambling as entire client accounts and budgets fall out of their control. A surge of sophisticated phishing attacks is letting scammers take ...

Members of the Johns Hopkins community are encouraged to stay vigilant in light of a significant rise in the volume and sophistication of phishing messages targeting Johns Hopkins, as well as recent ...

Google is filing a federal lawsuit against a network of foreign cybercriminals based in China that is accused of launching massive text-message phishing attacks, the tech giant told CBS News in an ...

Google sued a group of cybercriminals on Wednesday who it alleges are responsible for illegal phishing scams that use company branding to target account holders. The lawsuit filed with the Southern ...

Phishing training exercises are a staple of enterprise security strategy, but research shows current approaches aren’t all that effective. Phishing is a tried-and-true attack vector. These attacks ...

Microsoft is warning of an active scam that diverts employees’ paycheck payments to attacker-controlled accounts after first taking over their profiles on Workday or other cloud-based HR services.

Email security has long dominated the enterprise security conversation — and rightfully so. It remains a key vector for phishing, credential theft, and social engineering. But in 2025, the threat ...