News
Plain-English guides on web security, compliance, and keeping your clients protected.
Security researchers have identified a new multi-stage malware campaign that uses social engineering and Google’s Blogger platform to distribute PureLogs, an information-stealing malware strain. Secur...
Read article →Researchers at Check Point say they found evidence that DeepSeek was used to generate a browser-native malware concept that could act like ransomware without installing a traditional executable. The c...
Read article →Security researchers have uncovered a renewed campaign distributing the Ousaban banking trojan to Windows users in Spain and Portugal through phishing PDFs that imitate broken or incomplete files. For...
Read article →Adobe has released security updates for a set of high-risk flaws in ColdFusion and Campaign Classic, including several issues rated CVSS 10.0 that could allow remote code execution on vulnerable syste...
Read article →Security researchers say phishing operations are becoming more adaptive, using basic browser and device details to decide which malicious payload to deliver. By inspecting user-agent information, atta...
Read article →Researchers have disclosed two high-severity vulnerabilities in Cursor, an AI-assisted code editor, that could let a malicious prompt push the agent out of its sandbox and execute commands on a develo...
Read article →Security researchers say a once-novel social engineering method known as ClickFix is rapidly becoming a common way to deliver malware, signaling a broader shift in how attackers trick victims into inf...
Read article →Security researchers are warning that a newly disclosed critical vulnerability in Progress Kemp LoadMaster is already drawing attack attempts in the wild. According to eSentire’s Threat Response Unit...
Read article →Pentera Labs says its red team was able to turn Anthropic’s Claude Desktop into an unwitting participant in an intrusion, using a compromised email account and the app’s synchronization behavior to st...
Read article →Researchers at Check Point say they have identified a malware sample generated with DeepSeek that blends a browser-only ransomware idea with a legitimate Chromium feature, creating a working attack ch...
Read article →As organizations expand, the volume of security telemetry can grow faster than teams can manage it. What begins as standard firewall logging can evolve into a storage, processing, and alerting burden...
Read article →Security researchers are warning about a new supply chain concern they describe as phantom squatting, a tactic that takes advantage of large language models’ tendency to invent web domains for real co...
Read article →