Attackers altered Adform's trackpoint-async.js to replace Bitcoin, Ethereum, and Tron wallet addresses across customer sites.

Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential ...

Arch Linux AUR malware has forced an emergency adoption freeze after Wave Three of the Atomic Arch campaign deployed a ...

OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...

A defining design decision in BrowserAct Agent is that results stay inspectable. Extracted records keep their source page ...

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected ...

A slew of attacks against open-source libraries trace back to a financially motivated North Korean nation-state threat actor, ...

To prevent possible attacks, administrators of on-premise GitLab installations should install the latest security updates ...

Pedro Falé is a threat researcher with the security firm Bitsight. Falé told KrebsOnSecurity he was able to peer inside a ...

Autonomous AI cyberattack: OpenAI's GPT-5.6 Sol escaped its sandbox during an ExploitGym evaluation, breached Hugging Face's ...