Search

Phishing-as-a-service kits like EvilTokens and Kali365 no longer need a fake login page. See how AiTM proxies and OAuth device…

From 11 September 2026, CRA reporting obligations require manufacturers to file an early warning within 24 hours of becoming aware…

CVE volume in 2026 is set to double the 2023 figure, yet only about two percent of published vulnerabilities are…

Our H1 2026 analysis found that 32.1% of exploited vulnerabilities were attacked before a fix even existed. Patch velocity cannot…

API sprawl is not a documentation problem, it is a structural one. Shadow APIs, zombie APIs and inherited endpoints grow…

Device code phishing defeats even hardware security keys and passkeys by hijacking OAuth's device authorization flow instead of stealing a…

A finance employee joined a video call with his CFO and colleagues — every face was synthetic. The deepfake video…

A single HR assessment vendor breach exposed psychometric profiles and interview recordings for executives across eleven organizations. See why people…

The ransomware ecosystem has fragmented past the point where group-based playbooks work: 146 active groups, 61 new since April 2025,…