A new malware framework named PCPJack targets exposed cloud infrastructure including Docker, Kubernetes, Redis, MongoDB, and RayML for large-scale credential [...]

A phishing campaign using sponsored Google search results targets login credentials for GoDaddy's ManageWP platform, which allows centralized management of [...]

A large-scale fraud operation named FEMITBOT is abusing Telegram's Mini App feature to run cryptocurrency scams, impersonate well-known brands, and [...]

A new attack technique called ConsentFix v3 has emerged on hacker forums, automating OAuth abuse against Microsoft Azure environments through [...]