This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...

As the world observes World Youth Skills Day, the occasion serves as a timely reminder of the critical role that skills play ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

This photograph shows a screen during the 18th edition of the "InCyber" Forum, an international cyber security event, at the Grand Palais in Lille, northern France on April 1, 2026. The forum, which ...

My mouse finally got a day off.

The automation should live with the programs it manages.

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.