The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before…

Silver Fox APT abuses Microsoft-signed drivers to kill antivirus and deploy ValleyRAT remote-access backdoor

A vulnerability in the WordPress Paid Memberships Subscription plugin could lead to unauthenticated SQL injection on affected sites

Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data

Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data

Anthropic researchers discovered ransomware made via vibe-coding and North Koreans getting jobs in the US with chatbots

Reports of a massive Gmail hack affecting billions of users have been denied by Google

From emailing vendors to communicating with team members, serious business happens in the inbox.

The UK National Cyber Security Centre thinks public disclosure programs could help mitigate AI safety threats

Jaguar has proactively shut down systems to mitigate the impact of the incident, amid reports that workers at a UK manufacturing plant had been told to stay at home

The collaboration combines Blackpoint Cyber’s MDR expertise with NinjaOne’s automated endpoint management platform

The company has warned customers that their data may have been accessed, saying it's implemented extra safeguards in response

Experts have revealed an Azure AD vulnerability exposing ClientId and ClientSecret in a publicly accessible appsettings.json file

A malicious npm package “nodejs-smtp” has been discovered impersonating nodemailer and injecting code to drain crypto wallets