OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...

Thousands of iPhones were compromised using the Coruna exploit kit, which chained 23 iOS vulnerabilities into advanced attacks used for espionage and cybercrime.

Receiving a package you didn't order might seem harmless, but the FBI says one detail inside these mystery deliveries should immediately raise suspicion.

Anthropic's AI coding assistant, Claude Code, is launching a voice mode capability, marking a significant advancement towards ...

Microsoft, the EU's law enforcement agency Europol and partners have disrupted cybersecurity attacks by Tycoon 2FA, a global ...

Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 organizations monthly, prompting Microsoft’s Digital Crimes Unit (DCU) to work with ...

Broken authorization is one of the most widely known API vulnerabilities.  It features in the OWASP Top 10, AppSec conversations, and secure coding guidelines. Broken Object Level Authorization (BOLA) ...

Google uncovered Coruna iOS exploit kit with 23 exploits across five chains targeting iPhones running iOS 13–17.2.1.

In this article, we'll explore some of the specific techniques and systematic approaches that separate high-performing teams from the rest, and show you how to bridge this growing performance gap.

Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities actively exploited throughout 2025, almost half ...

Spec-Driven Development sets written specs before AI coding; a 4-step flow links requirements, design docs, tests, and QA.

A software security flaw in PayPal’s loan app leaked customer data for 6 months, forcing the payment giant to issue refunds ...