Bluekit, a sophisticated Phishing-as-a-Service (PHaaS) platform, leverages browser-in-the-middle (BitM) attacks to intercept authentication sessions and bypass multi-factor authentication (MFA) protections. Operating as a commercial service, Bluekit provides cybercriminals with turnkey phishing infr
Pwn2Own Berlin 2026 wraps up: $1.3M paid out for 47 zero-days. DEVCORE takes Master of Pwn with $505K. Three intense days of enterprise exploits.
Traditional cryptographic defenses are facing unprecedented challenges from artificial intelligence and machine learning technologies. AI-powered attacks can analyze encrypted traffic patterns, exploit implementation flaws faster than human defenders, and systematically discover cryptographic weakne
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Android and Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. Federal agencies must patch these flaws by the mandated deadline, while privat
AI agents are reshaping cybersecurity faster than we can verify them. Without trusted identity standards and runtime controls, we’re flying blind.
Cybercriminals are orchestrating a targeted phishing campaign against Chrome extension developers, sending fraudulent copyright infringement notices that impersonate the Chrome Web Store. These convincing emails trick developers into clicking malicious links that lead to credential-harvesting pages
Cybercriminals are exploiting the massive hype around Grand Theft Auto 6 (GTA 6) by creating fraudulent websites claiming to offer early access, beta keys, and exclusive content. These malicious sites distribute information-stealing malware, cryptocurrency draining scripts, and phishing schemes. Thr
Day Two of Pwn2Own Berlin 2026: $523K awarded for 24 zero-days on Day One. SharePoint, Exchange, and Safari under attack today. The race for Master of Pwn intensifies
Elon Musk revealed that US military suicide drones have been operating on Starlink satellite internet connections, directly violating SpaceX’s terms of service and usage policies. The unauthorized use of commercial satellite infrastructure for offensive military operations raises critical questions
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Palo Alto Networks vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. The flaw affects PAN-OS software and requires immediate attention from organizations runn