Track CVE vulnerabilities, run security tools, and stay informed with expert cybersecurity guides.
Microsoft has disclosed a credential theft campaign by Storm-2561 that uses SEO poisoning to distribute trojanized VPN clients via fake websites and GitHub-hosted signed installers, stealing credentials with the Hyrax information stealer.
A security researcher poisoned an AI knowledge base with three fake documents in under three minutes, making it report fabricated financial data with full confidence.
An ID verification company left over one billion identity records exposed online. Driver licenses, passports, and biometric data — all sitting on an unprotected server. Here is what happened and what you need to do right now.
Security researchers tricked Perplexity Comet AI browser into a phishing scam in under four minutes using a technique called Agentic Blabbering. Once trained, the attack works on every user of the same browser. Here is how it works and how to protect yourself.
March 2026 Patch Tuesday brings 77 fixes including a critical SQL Server elevation of privilege bug that lets attackers go from low-level access to sysadmin over the network. Here is your triage framework.
A DDoS attack hit my client. Everyone celebrated when it was mitigated. Nobody noticed the API exploit happening simultaneously on a different subdomain. Welcome to multi-vector attacks.