Meta is fighting back as attackers continue to target Facebook, Messenger and WhatsApp users. Here’s what you need to know.

Online shopping feels familiar and fast, but a hidden threat continues to operate behind the scenes. Researchers are tracking a long-running web skimming campaign that targets businesses connected to ...

Threat actors have been hacking FortiGate firewalls via exposed ports and weak credentials with the help of AI.

Hackers have a new tool called ClickFix. The new attack vector combines fake human-verification prompts with malware, trying to trick users into running Terminal commands that bypass macOS security.

That the Google Chrome web browser is under seemingly constant attack should come as no surprise to anyone. After all, with 3.5 billion users, it’s by far the most popular browser on the planet and, ...

Learning is increasingly cloud-based and off-campus: Students across OECD countries report spending an average of 20.5 hours per week using digital learning resources, extending learning well beyond ...

OWASP just released the Top 10 for Agentic Applications 2026 - the first security framework dedicated to autonomous AI agents. We've been tracking threats in this space for over a year. Two of our ...

This assumption breaks down because HTTP RFC flexibility allows different servers to interpret the same header field in fundamentally different ways, creating exploitable gaps that attackers are ...

From AI-powered vendors protecting email inboxes and web browsers, to providers of modern code security, here’s a look at 20 key companies in web, email and application security. While the emergence ...

The latest IBM X-Force Trend and Risk annual report has confirmed an increase in web-based attacks, with cybercriminals using legitimate corporate websites to push malware and steal confidential data.

A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time ...