The best podcast episodes on the biggest breaches were recorded close to the event, often by people who worked on it. My picks: Malicious Life on SolarWinds, Darknet Diaries on NotPetya, Andres Freund ...

Researchers at Varonis gave a phishing kit's built-in AI assistant a detailed brief: write a Microsoft 365 MFA lure aimed at a CISO, with a branded QR code and a credential-harvesting page.  What came ...

Wazza filters visitors with session tokens and browser checks before serving Adobe-themed Device Code phishing pages.

BPFDoor , OpenSSH compresses a little too much, AI can find bugs. Who gets them fixed?, TP-Link and the courts, Cisco NX-API ...

Microsoft’s Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data ...

Rockstar Games suffered multiple breaches exposing source code, 78.6M records and a playable GTA VI development build.

An IT security expert explains how companies can manage cyber risks linked to AI, app permissions and human error while keeping potential damage under control ...

Cybersecurity Awareness Month 2026 arrives as online attacks become easier to launch, harder to spot, and more focused on ...

Over 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens ...

You have set up two-factor authentication and made your password longer. It is tempting to think that your account is now ...

Google temporarily stops OSS VRP product vulnerability reports after a surge in automated submissions, most of which it says ...

You can have a strong password and still lose an account. That is because your password is only one part of the login process ...