A new ClickFix malware-as-a-service (MaaS) framework called Exvicy has been built on code lifted from a rival service, ErrTraffic.

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency services.

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

PamStealer now uses live key exchange to block static payload recovery and is delivered through a fake Wavel macOS download.

AI agents hacking retailers stole more than 600,000 credit card records from hundreds of online stores since July 2026, at $25.46 per target -- first documented case of fully autonomous criminal ...

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records.

The City of Calgary says 911 operators broke rules leading to a delay of almost an hour before the alert went out for missing 11-year-old boy Parker Wells. Wells, who had autism, was found dead in a ...

New York City's John F Kennedy International Airport posted on X: "Due to an FAA equipment outage, arrivals and departures ...

Manchester Airports Group data breach exposed 8.7 million customer records when extortion group FulcrumSec found an Iterable API key left in publicly visible JavaScript -- no server intrusion required ...

Android gives you surprising control over your privacy and security, but some of the most useful settings are easy to ...

In my previous article, I talked about how I wrestled with the cryptic fixed-length binary data from Keiba Book, feeling like ...