Scanning 5M apps uncovered 42K exposed secrets in JavaScript bundles, revealing major gaps in traditional SAST, DAST, and ...

A dramatic spike in npm-focused intrusions shows how attackers have shifted from opportunistic typosquatting to systematic, credential-driven supply chain compromises — exploiting CI systems, ...

Visitors to your website might want directions to your store via Google Maps, a roundup of your social media feeds, and a ...

Targeted email scams are getting bolder and more convincing. Here's how they work, and the smartest ways to defend yourself. I review privacy tools like hardware security keys, password managers, ...

AI giant OpenAI has revealed its API metadata was exposed in a security breach. A phishing incident at third-party data analytics provider Mixpanel compromised user details, including names, email ...

OpenAI is notifying some ChatGPT API customers that limited identifying information was exposed following a breach at its third-party analytics provider Mixpanel. Mixpanel offers event analytics that ...

The phishing attacks have left agencies and advertisers scrambling as entire client accounts and budgets fall out of their control. A surge of sophisticated phishing attacks is letting scammers take ...

Google is filing a federal lawsuit against a network of foreign cybercriminals based in China that is accused of launching massive text-message phishing attacks, the tech giant told CBS News in an ...

Google sued a group of cybercriminals on Wednesday who it alleges are responsible for illegal phishing scams that use company branding to target account holders. The lawsuit filed with the Southern ...

A new phishing tool targeting Microsoft 365 users has entered the chat, further democratizing social engineering campaigns for lower-skilled cybercriminals. The tool, called Quantum Route Redirect, ...

Clickfix attacks surged 500% in early 2025. Cybercriminals now use AI in BEC scams. AI is making phishing harder to detect. Cybercriminals are shifting their techniques to focus on the human element, ...

Phishing training exercises are a staple of enterprise security strategy, but research shows current approaches aren’t all that effective. Phishing is a tried-and-true attack vector. These attacks ...