Adobe patched 254 flaws, mostly in Experience Manager, impacting cloud and on-prem users, preventing critical code execution ...

Salesforce Industry Cloud has 20+ config risks exposing sensitive data; customers must fix most issues to avoid compliance ...

FIN6 uses fake resumes hosted on AWS to deliver More_eggs malware, targeting recruiters to steal credentials and card data ...

The stealer, initially marketed on Telegram for free under beta in late December 2024, has since transitioned to a malware-as ...

However, NHIs introduce unique risks and management challenges that have security leaders on high alert. Forty-six percent of ...

Rare Werewolf APT uses phishing and legitimate tools to attack Russian and CIS firms, stealing credentials and deploying ...

CISA warns of critical Erlang SSH and Roundcube vulnerabilities actively exploited, affecting servers and webmail users ...

An attacker could also take advantage of Google's Forgot Password flow to figure out the country code associated with a victim's phone number, as well as obtain their display name by creating a Looker ...

Reconnaissance and cyberattacks from July 2024 to March 2025 hit 70+ firms, including SentinelOne, linked to Chinese threat ...

Supply chain attack infects 16 GlueStack npm packages used by 1M weekly users, enabling malware that steals data and controls ...

A phishing campaign infects 722 users with malicious browser extensions in Latin America to steal bank login data.

In 2024, dormant accounts, unmanaged SaaS access, and GenAI permissions expose enterprises to data breaches and insider ...