DeadLock ransomware uses Polygon smart contracts, Session, and blockchain-hosted leak content to make extortion infrastructure harder to disrupt.

A leaked n8n API key is only the start. GitGuardian's research traces the full chain, from exposed tokens and weak keys to ...

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track ...

TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could ...

Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...

Beacon, a CRM provider for charities and nonprofits, says an AWS access key "potentially exposed in public JavaScript build artifacts" is the leading suspect in its July breach.

The sign-in prompt in Office 365 or Microsoft 365 desktop apps may say device TPM problem, Trusted Platform Module ...

ZDNET's recommendations are based on many hours of testing, research, and comparison shopping. We gather data from the best ...

McKinsey’s latest State of AI report revealed that 62% of organizations have started experimenting with AI agents in some form. However, Gartner expects over 40% of these projects to be scrapped by ...

OpenAI is expanding access to its cyber AI models through approved partners, with added verification, monitoring, and human ...

Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...

The flaws in Zoom could let someone in a meeting take control of another participant’s device without the victim clicking anything.