Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Researchers found attackers using fake CAPTCHA pages. Users should never run PowerShell or Windows commands requested by ...

Cybercriminals are moving beyond email scams and into social media feeds, using tutorial-style videos on TikTok and Instagram to spread malware and steal credentials ...

Because even AI giants know tokens don't grow on trees. OpenAI is weighing steep cuts to the per-token prices it charges for ChatGPT and its APIs, according to a Wall Street Journ ...

LastPass has been affected by the recent data breach of market intelligence platform Klue, which compromised sensitive ...

A new collection of 124 million unique passwords from hundreds of millions of malware stealer log records has been confirmed ...

Have I Been Pwned has added 124 million passwords and 56 million email addresses from infostealer logs tied to infected devices.

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Threat actors have made over 81 million login attempts in a massive password spray campaign targeting Azure CLI.

ThreatsDay Bulletin covers this week’s cyber threats, from phishing and ransomware to exposed AI systems, sandbox flaws, and ...