Latest security news

As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.

ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands

RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials

Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government

A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July

Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored code before execution.

As frontier AI models become increasingly restrictive, security teams are facing a "safety penalty" that hampers real-time incident response. Discover how organizations can move toward operational sovereignty to ensure their defensive AI keeps pace with unconstrained adversaries.

ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems

The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute

CISA issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.