Cybersecurity agencies from the United States and eight other countries have issued a joint warning that Russian state ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

The identity layer for AI agents is finally being built. What MCP, A2A and new research delivered since March, and what's ...

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

Forg365 is a new phishing platform targeting Microsoft 365 accounts with AI emails, AiTM attacks, and device-code abuse.

Russia stole critical infrastructure network maps for over a decade using default router passwords, a 13-nation joint ...

JetStream helps enterprises safely adopt third-party MCP servers, giving security, risk, and assurance teams one platform to verify server images, control agent permissions, and govern runtime ...

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026.ClickFix – a social engineering ...

Build AI agents without code using n8n's 400+ integrations to automate Gmail, Slack, and CRM tasks with ChatGPT-powered ...

Google is pressing its massive Gmail user base to replace traditional passwords with passkeys, a move grounded in federal ...

Scammers are spreading a fake crypto casino scam in the name of a popular YouTuber, with compromised Discord accounts as the ...