A new report uncovers the vast, resilient ecosystem behind Lumma Stealer, revealing how affiliates use a web of tools and services to diversify attacks and evade takedowns.

A new report reveals a widespread data theft campaign targeting Salesforce instances. Attackers used compromised OAuth tokens from a third-party app to steal data and credentials.

In the present economy, data is more valuable than gold. Unfortunately this reality has fueled the rise of the thriving underground black…

The FBI has issued a FLASH Alert warning about UNC6040 and UNC6395, two groups actively compromising Salesforce via vishing and malicious OAuth apps to steal data.

A new, undetectable malware called ModStealer is spreading through fake job ads, stealing data from macOS, Windows, and Linux systems.

EvilAI is a new AI-powered malware that uses legitimate-looking applications and advanced obfuscation to bypass security and steal data from victims.

A new infostealer, Raven Stealer, is distributing via pirated software and exfiltrating stolen data to attackers via Telegram. Learn how it works and how to stay safe.

The npm package postmark-mcp was backdoored to silently forward emails to an external server. The incident shows how Model Context Protocol (MCP) servers are a new supply chain risk.

A new report shows LAPSUS$, Scattered Spider, and ShinyHunters have formed a collaborative alliance, sharing tactics like social engineering and MFA bypass to launch global attacks.

Red Hat confirmed a breach of its consulting arm's GitLab instance. Hackers stole 570 GB of data, including Customer Engagement Reports that detail client network infrastructure.

Kaspersky exposed the Mysterious Elephant APT targeting South Asia. The group uses MemLoader and custom tools (BabShell) to steal sensitive WhatsApp desktop data and exfiltrate documents.