Transparent Tribe (APT36) is linked to new cyber-espionage attacks using malicious LNK files, adaptive RATs, and long-term ...

A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell ...

China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.

A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver ...

The Python Package Index (PyPI), run by the Python Software Foundation, has officially invalidated all the publishing tokens that were stolen in the GhostAction supply chain attack that happened ...

An AI-powered penetration testing tool is automating offensive cybersecurity, accelerating vulnerability discovery and ...

You might be staring at your budget, wondering how you’re supposed to cover rent, debt, and everything else on $20–$25 an ...

Security researchers uncovered a range of cyber issues targeting AI systems that users and developers should be aware of — ...

Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks ...

How cybercriminals and organized cargo thieves stole 40,000 pounds of lobster using hacked load boards, fictitious pickups ...

Ever since reporting earlier this year on how easy it is to trick an agentic browser, I've been following the intersections between modern AI and old-school scams. Now, there's a new convergence on ...

The cloud giant has stopped more than 1,800 suspected scammers from the Democratic People's Republic of Korea (DPRK, aka North Korea) from joining its workforce since April 2024, Amazon Chief Security ...