Microsoft released PowerShell scripts that let IT admins view, export, and delete Windows settings backup data through ...

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure.

The Thunderbird team has officially released Thunderbird 154, delivering several useful new features alongside a substantial ...

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure. Security researchers are warning of a newly ...

Account takeover is now perpetrated by hijacking trusted workflows, even in environments where multi-factor authentication is ...

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

Modern organizations don't operate from a single server room anymore. Today's enterprise environment spans dozens of cloud services, SaaS applications, APIs, AI agents, and non-human identities, all ...

GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...

How a hackathon dictation app running Speechmatics on-device speech-to-text exposed why real-time diarization needs GPU acceleration, CoreML, and DirectML.

Jewelbug, a China-linked hack-for-hire group, breached 15 government ministries at once by inserting one script into a shared ...

Research released around the recent Black Hat USA 2026 conference demonstrates that artificial intelligence is increasing the speed and scale of cybersecurity activity without replacing the attack ...