Every report filed under this tag.
TeamFiltration attackers targeted over 5,700 Microsoft 365 accounts across 28 tenants, compromising seven unmanaged service accounts using default or unrotated passwords without MFA.
Compromised MemTensor packages on npm and PyPI deliver the cross-platform sckit credential stealer, targeting GitHub, AWS, SSH, npm, PyPI and developer secrets.
Threat actors are using passkey-themed social engineering to compromise Microsoft 365 accounts and gain access to sensitive cloud data, according to Microsoft Threat Intelligence.
Security researchers have discovered that nearly one in ten publicly accessible LiteLLM deployments were either using the platform's default administrative key or operating without authentication, potentially exposing AI infrastructure to serious attacks.
A joint U.S. advisory alleges DeepSeek, Alibaba, Moonshot AI and others have pulled billions of tokens out of Claude, GPT, Gemini and Grok since late 2024 to shortcut their own model training.
Cybersecurity researchers have uncovered a large-scale cryptojacking campaign that compromised 3,562 unique Redis servers, turning exposed database infrastructure into cryptocurrency-mining workers.
Cybercriminal group Slim Spider has targeted a Brazilian financial institution in an operation focused on stealing sensitive information associated with cryptocurrency custody operations.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.