Security firm Mandiant has released a database that allows any administrative password protected by Microsoft’s NTLM.v1 hash ...

A cross-site scripting (XSS) flaw in the web-based control panel used by operators of the StealC info-stealing malware ...

A new one-click attack flow discovered by Varonis Threat Labs researchers underscores this fact. ‘Reprompt,’ as they’ve ...

China-linked attackers used Venezuela-themed phishing and DLL side-loading to deploy the LOTUSLITE backdoor against U.S.

Five fake Chrome extensions impersonate Workday and NetSuite to steal cookies, block admin controls, and hijack sessions for ...