StyleSmuggler Magento zero-day is under active attack, letting unauthenticated attackers execute code and install backdoors ...

Identity sprawl, privilege creep, and shadow admin rights expand attack surfaces across Active Directory and Entra ID.

Hackers have been exploiting a critical-severity vulnerability in the Elementor Pro WordPress plugin to hack websites, WordPress security firm Defiant warns.

Top Security Teams Are Using AI Agents Expert cybersecurity teams are increasingly employing artificial intelligence to assist human operations rather than replacing human workers entirely.

Booz Allen's Cyber Weapon Index tested 18 AI models on live enterprise network hacking and found only Claude Mythos completed ...

Microsoft is warning about an ongoing scam campaign starting in Teams.

Zscaler will cut 3% of its global workforce and redirect spending to specialized sales, channel and enterprise teams as it ...

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

Microsoft says TerminalFix uses fake Cloudflare CAPTCHAs to trigger PowerShell and deploy a reverse-tunnel backdoor for internal network access.

Threat actors are increasingly abusing overlooked Active Directory service principal name (SPN) misconfigurations to launch stealthier Kerberoasting attacks, turning ordinary user accounts into ...

Threat actors are increasingly exploiting overlooked Active Directory service principal name misconfigurations, making ...

Aurora ransomware affiliates used AI coding tools to target 20+ organizations, gaining domain access and stealing data across ...