How UnderDefense investigated a ClickFix attack that hid its C2 in a Polygon smart contract using EtherHiding, from the EDR alert to full attribution

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure

The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws

The UK’s National Cyber Security Centre wants network device makers to improve forensic observability

LogoKit now builds per-victim phishing pages using live screenshots of the target's real website

TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging

The company found Claude AI had escaped containment three times and targeted other organizations

AWS has linked North Korea to the axios campaign to other attacks on npm libraries

An AI leaving notes to future versions of itself is pure sci-fi; forgetting to lock down an environment is prosaic

Google Chrome 151 patches 370 security flaws, including seven Critical vulnerabilities. Users on Windows, macOS, and Linux should update now.

Is SOAR dead? Discover why playbooks stall on investigation and how an AI SOC reasons per alert to cut noise.

A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations