Google says the group’s tools enabled scammers with little technical skill to impersonate agencies like the IRS and the USPS ...

BLACK HAT, EUROPE -- (Booth #305) -- Push Security, a leader in browser-based detection and response, today announced the discovery of a new class of phishing attack that enables Microsoft account ...

Researchers detail new AI and phishing kits that steal credentials, bypass MFA, and scale attacks across major services.

Learn how an Access Fabric can continuously decide who can access what, from where, and under what conditions—in real time.

The Federal Office for Information Security (BSI) has examined the security of popular email programs. The overall result is ...

Malicious Chrome and Edge extensions collected browsing history, keystrokes and personal data from millions of users before ...

The United States Inspector General report reviewing Secretary of Defense Pete Hegseth’s text messaging mess recommends a ...

The credit check and identify verification services provider 700Credit is the latest company to suffer a massive data breach.

Google is discontinuing its Dark Web Report and will delete all stored data. As an alternative, the company recommends ...

A sophisticated phishing campaign is exploiting ADFS with spoofed login pages to bypass MFA and take over accounts. This report explains how attackers succeed, why legacy authentication is vulnerable, ...

Attacker with local access could escalate privileges, Microsoft warns; analyst calls it ‘the most urgent concern’ this month.