Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.

The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.

The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.

In the wake of an agentic attack against its own Medicare systems, Australia's government is feeling out what regulations might look like for frontier AI companies.

Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.

A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.

A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.