Stripe iframe skimmer hit 49 merchants in Aug 2024, bypassing CSP to steal cards, driving PCI DSS 4.0.1 updates.

OS users are being tricked in the ongoing campaign with fake GitHub pages that deliver the Atomic infostealer.

LastPass is warning users of a campaign that targets macOS users with malicious software impersonating popular products ...

Using a combination of different manipulation techniques, the OpenAI-LLM was tricked into leaking private data. What did Sam Altman know about it?

Threat actors are impersonating known brands in a widespread campaign aimed at infecting macOS users with information stealer ...

A malicious npm package named Fezbox has been found using an unusual technique to conceal harmful code. The package employs a ...

ShadowLeak zero-click flaw in ChatGPT Deep Research leaks Gmail data via hidden HTML prompts, bypassing security ...

Researchers at Radware found a zero-click flaw in ChatGPT Deep Research agent when connected to Gmail and browsing ...

An open source software supply-chain vulnerability is an exploitable weakness in trusted software caused by a third-party, ...

ESET researchers reveal how the notorious APT group Turla collaborates with fellow FSB-associated group known as Gamaredon to ...

A new malware campaign is impersonating popular password managers to steal sensitive personal data from Mac users.

Mac users are being targeted by unknown threat actors offering malicious versions of well-known software, including LastPass, 1Password, and Thunderbird, via the developer platform GitHub.