Security researchers at Cybernews discovered on June 12 what they describe as one of the largest credential databases ever left exposed online — a publicly accessible Elasticsearch cluster holding 24 ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Smart hack to access free internet anywhere you go! 🌐💡!! Major rule changes from July 1: Aadhaar, ITR, passport & more Monsoon is about to change the weather across India — here's where it will hit ...

A new collection of 124 million unique passwords from hundreds of millions of malware stealer log records has been confirmed ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code ...

LayerX tricked six AI browsers, including ChatGPT Atlas, Comet and Claude, into leaking user credentials by convincing them they were playing a game.

The Federal Bureau of Investigation (FBI) recently issued a public warning about a dangerous new hacking platform that allows cybercriminals to hijack Microsoft 365 accounts, including Outlook email, ...

A severe security flaw in Meta’s automated AI support assistant allowed hackers to hijack high-profile Instagram accounts via basic prompt injection. Attackers spoofed target locations via a VPN and ...

In a world full of useless AI, Apple is introducing a feature to iOS 27 that could actually save iPhone users' hides. Powered by Apple Intelligence, the Passwords app can automatically change ...

Russia’s federal media regulator, Roskomnadzor, plans to create a unified “state VPN” for Russian software developers who have lost access to foreign repositories because of internet restrictions, The ...

Ultrahuman’s user database was recently hacked, and the smart ring company says there was “no evidence of misuse.” On March 27, Ultrahuman experienced a security breach that allowed malicious actors ...