Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

Ghostwriter’s March 2026 Ukraine attacks use PDF lures and geofencing to deploy Cobalt Strike on government targets.

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack ...

For questions about subscriptions or your Slate Plus feed, check our FAQ. Please enable javascript to get your Slate Plus feeds. If you can't access your feeds ...

A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...

Instructure, the edtech giant behind the widely popular Canvas learning management system (LMS), has reached an "agreement" ...

"Hi Jake, That said, the last time I saw his profile, it was just a few suggestive gym progress pics. Now I’ve found out he’s ...

Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...

"Hi Jake, I’m a 75-year-old lesbian, and last week I got completely disrespected by a younger gay man at our Pride planning ...

AI company collected personal information without adequate safeguards and valid consent, but has since addressed major ...

FrostyNeighbor, a long-running cyberespionage actor apparently aligned with the interests of Belarus, has been active recently in campaigns targeting governmental organizations in Ukraine.This latest ...