Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.

An advanced malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with ...

Malicious Chrome and Edge extensions stole crypto, credentials, sessions, and browser data in a campaign active since early ...

Roundcube webmail vulnerability patched August 9, 2026 in an eleven-flaw emergency update: a pre-authentication IMAP command injection discovered by Horizon3.ai requires no credentials to exploit, and ...

Blocklists were already losing ground before AI entered the picture. Phishing domains have been getting shorter-lived for years, campaigns have been burning infrastructure faster, and the gap between ...

All of the content of this internet site is owned or controlled by American Chemical Society. These Terms of Use and Legal Disclosures (“Terms of Use” or “Terms ...

A phishing page designed to evade security tools accidentally broke its own credential-stealing operation after a coding ...

Cybersecurity researchers have uncovered 24 malicious npm packages that abuse package mirror services to host obfuscated ...

A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft ...

Twenty-four malicious npm packages have been used to turn trusted package mirrors into staging points for ClickFix phishing ...