Okta Threat Intelligence has identified a high-risk phishing platform named VoidProxy. The service targets Microsoft 365 and Google users to capture sensitive data, including login ...

A newly uncovered cyber-espionage campaign is attributed to a Chinese-linked Advanced Persistent Threat (APT) group. While the campaign strongly aligns with Chinese APT tactics and ...

Adobe has released a security update addressing a serious flaw in Adobe Commerce and Magento Open Source, known as SessionReaper (CVE-2025-54236). This vulnerability has a ...

Silent Push, a cybersecurity intelligence firm, has uncovered 45 previously unreported domains linked with Salt Typhoon, with part of the infrastructure overlapping with UNC4841. Significantly, ...

Security researchers have uncovered a supply chain attack in the npm registry, involving four packages disguised as Flashbots MEV tools and cryptographic utilities. These packages ...

Researchers at Check Point reported that the threat actor known as Silver Fox, also referred to as SwimSnake or UTG-Q-1000, employed a Bring Your Own ...

Amazon’s threat intelligence team has disrupted a watering hole campaign traced to APT29, also known as Midnight Blizzard, a cyber unit tied to Russia’s Foreign ...