The previously unknown SnapMC group exploits unpatched VPNs and webserver apps to breach systems and carry out quick-hit extortion in less time than it takes to order a pizza.

Cybercriminals exploited bugs in the world's largest digital-goods marketplace to create malicious artwork offered as a perk to unsuspecting users.

Post-auth flaws could give attackers a platform from which to pivot to other parts of the network

Sounil Yu, CISO at JupiterOne, discusses software bills of materials (SBOMs) and the need for a shift in thinking about securing software supply chains.

‘Never stop learning’, Swig readers told during Q&A session

The group, which conducts espionage and sows disinformation, is larger than previously thought and has shifted tactics.

A recent phishing campaign targeting Coinbase users shows thieves are getting cleverer about phishing one-time passwords (OTPs) needed to complete the login process. It also shows that phishers are attempting to sign up for new Coinbase accounts by the millions…

Company expands its research expertise with addition of AI and security operations experts from its PatternEx acquisition to the Labs team.

Mitigations are available for yet-to-be-fixed vulnerability

A stored XSS and arbitrary file-upload bug can be paired with an authorization bypass to wreak havoc.

A ransomware kit costs as little as $66, though it needs to be modified, while a spearphishing attack can run as low as $100, says Altas VPN.

Oops!… They did it again.

Romance scams and dating site treachery with a new twist – “there’s an app for that!”