Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...

Hop-on, Inc. (OTCID: HPNN) today announced that its wholly owned subsidiary, Digitalage, Inc., has launched Digitalage.com as the Company's public operating platform ...

Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack ...

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow ...

Google has released a Chrome 148 update that resolves 79 vulnerabilities, including 14 critical-severity security defects.

Ghostwriter’s March 2026 Ukraine attacks use PDF lures and geofencing to deploy Cobalt Strike on government targets.

FrostyNeighbor, a long-running cyberespionage actor apparently aligned with the interests of Belarus, has been active recently in campaigns targeting governmental organizations in Ukraine.This latest ...

Nacha announced today that Relish has become a Nacha Preferred Partner for Account Validation, Fraud Monitoring, and Risk and Fraud Prevention.

Admins with Dynamics 365 on-prem should also take note of a “severe” vulnerability that allows remote code execution.

Weekly cybersecurity recap covering zero-days, malware, phishing, supply chain attacks, cloud threats, AI security risks, and ...