Articles
Dive into expert-written content covering the latest cybersecurity threats, trends, and best practices. Stay ahead with clear, actionable guidelines and best practices for cybersecurity professionals.
A 2005 forum dump shows how little ransomware culture has changed
Ninety active accounts produced most of Exploit.in's traffic, and the habits they built still shape today's ransomware crews.
Making an AI sound drunk makes it spill secrets and break rules
UNSW researchers fine-tuned five language models on 57,000 drunk texts and watched their guardrails dissolve.
One ransomware crew pivots between four brands with the same playbook
Microsoft says Storm-2570 swaps ransomware payloads but never swaps its tools, handing defenders a stable set of behaviors to hunt.
Post-quantum security startup pQCee raises $3.9M seed round
Singapore-based quantum-safe cybersecurity startup pQCee raises $3.9M seed round co-led by SGInnovate and Lotus One Investment.
Claude for Chrome flaw lets other extensions read Gmail and Google Docs
Two unpatched Claude for Chrome flaws let rogue extensions forge clicks that access Gmail, Docs, and Calendar data.
Jailbroken Google Gemini spun up new C2 server for Russian fraudster in six minutes
A jailbroken Gemini AI performed 90% of a Russian fraudster's botnet operation including spinning up a C2 server in six…
AsyncAPI npm packages with millions of weekly downloads compromised via GitHub actions
Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.