Multiple outages at major hyperscalers lasted several hours, causing web services to go down, while a battery fire took out ...

Weirdly, a public exploit and technical details are available online, showing how attackers can trigger the vulnerability and remotely extract secrets, credentials, and other sensitive data.

A severe vulnerability affecting multiple MongoDB versions, dubbed MongoBleed (CVE-2025-14847), is being actively exploited ...

Stolen crypto data sell on the dark web for $105. The data is collected from phishing attacks and is added to a complex ...

The memo does not include any requirements for authenticators to be phishing-resistant, even though DoD is required to retire phishable authenticators by 2027.

A fake WhatsApp API that worked flawlessly hid a trap. It stole messages, hijacked accounts, and stayed invisible. Sometimes, ...

The malicious fork, named ‘lotusbail’ has all the same functionality as the legitimate project, but it also steals WhatsApp authentication tokens and session keys. Furthermore, it intercepts and ...

Learn how to build secure user portals for content-heavy SaaS using passwordless authentication, RBAC, session security, and CDN protection.

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites | Read more hacking news on The Hacker News ...

A malicious npm WhatsApp library with 56,000 downloads secretly stole messages, credentials, and contacts in a sophisticated ...

Two Chrome extensions called "Phantom Shuttle" pretend to be proxy services, but in reality steal user data. The malicious ...