EvilTokens Hides Its Attack Flow in the Browser, Exposing Static Analysis Gaps
EvilTokens is drawing attention in phishing investigations for abusing Microsoft Device Code authentication and hiding...
All articles in Vulnerabilities. · 1373 articles
EvilTokens is drawing attention in phishing investigations for abusing Microsoft Device Code authentication and hiding...
Threat actors are once again exploiting the trust people place in everyday workplace tools. A newly discovered phishing...
Anthropic has formally accused Chinese tech and e-commerce giant Alibaba of orchestrating a massive, unauthorized extrac...
A public proof-of-concept (PoC) exploit for the critical libssh2 remote code execution vulnerability tracked as CVE-2026...
The White House has issued a major executive order directing U.S. federal civilian agencies to migrate high‑value system...
A public proof-of-concept exploit is now available for CVE-2026-45504, a high‑severity server-side request forgery vulne...
A sophisticated threat actor is actively targeting SD-WAN infrastructure at a major service provider. The campaign culmi...
Anthropic has unveiled Claude Tag, a new agentic AI feature that integrates directly into Slack, allowing teams to tag @...
Phishing attacks have grown far more complex in recent years. Attackers no longer rely on simple static pages to steal c...
Most organizations spend a lot of time locking the front door of their cloud environments. Firewalls, access controls, a...
New research found that 2,058 of 6,038 apps across the LG webOS and Samsung Tizen ecosystems included residential proxy...
A critical use-after-free (UAF) vulnerability in Samsung’s proprietary KNOX security subsystem, which has been hidden fo...