Crypto exchange choices are difficult; platforms claim the best fees, tokens, and safety. MEXC, active since 2018, grows ...

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

None ...

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Explore the latest news and expert commentary on Endpoint Security, brought to you by the editors of Dark Reading ...

Anthropic accuses Alibaba of using 25,000 fake accounts to scrape Claude AI The alleged campaign generated 28.8 million queries in a large-scale model-extraction effort to replicate AI capabilities.

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...