A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates ...

A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft ...

MuddyWater-linked threat actors are using a backdoor named Dindoor that abuses the legitimate Deno runtime to execute ...

Five layers of a 2026 phish, two studies three years apart, and the tells that replaced the ones you were taught. In October 2022, Osterman Research published a study we commissioned, The Business ...

Mirage2FA uses AiTM phishing to steal Microsoft 365 credentials and authenticated sessions, bypassing conventional MFA and ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

Abstract: The Android ecosystem is vulnerable to issues such as app repackaging, counterfeiting, and piracy, threatening both developers and users. To mitigate these risks, developers often employ ...

The Coldcard hack is a preview. When machines can read what humans couldn't (or just didn't), closed source stops being a category. In the age of highly skilled AI, everything that is distributed is ...

Meta, considered a bit of a straggler in the AI harnesses realm, is making strides to catch up. This week, the company released a new terminal coding agent aimed at programmers looking for assistance ...

Powered by the new Muse Spark 1.2 model, it is designed to handle complex software engineering work across large repositories. Unlike ChatGPT Codex and Claude Code, there’s currently no dedicated app ...

Meta is rolling out its first coding agent called Muse Code as the company ramps up its investment in AI models and services to try and take on Anthropic and OpenAI. It's the latest release from AI ...