German, US, and Indonesian authorities have dismantled Kratos, a phishing-as-a-service platform linked to around 15,000 phishing campaigns every month. Investigators disabled the platform’s central infrastructure,…
A Russian-speaking threat actor known as Trim has reportedly turned Claude jailbreak methods into a commercial AI-powered penetration testing platform called AI Pentest Checker. The…
A fake job interview campaign is infecting macOS devices with GolangGhost, a remote access trojan capable of stealing Chrome credentials, collecting cryptocurrency wallet data, and…
Yubico has launched YubiKey 5.8, extending hardware-backed passkeys beyond account login into digital signatures, enterprise approvals, identity wallets, and payment workflows. The company announced the…
Hackers are using compromised organizational Outlook accounts to distribute phishing emails that can steal MFA-protected Microsoft 365 sessions. The campaign targets universities, businesses and multinational…
Spain’s data protection authority has fined 23andMe €2.4 million for security and notification failures connected to its major 2023 data breach. The incident exposed personal…
A prompt injection weakness in Microsoft’s Azure DevOps MCP server can let an attacker hide malicious instructions inside a pull request description. An AI coding…
An anonymous security researcher using the GitHub handle “bikini” has published a growing collection of proof-of-concept exploits and vulnerability research without documenting advance notification to…
The FBI has warned that scammers are impersonating its Internet Crime Complaint Center to steal more money and personal information from previous fraud victims. The…
Zimbra has released Zimbra Collaboration Suite 10.1.20 to fix a command injection vulnerability in its SNMP monitoring component. The flaw affects servers that have SNMP…
June 2, 2026
2 comments 
