While not critical, CISA added the Citrix and Git bugs to its list based on evidence of active exploitation.

Attackers use the EvilGinx framework to harvest credentials and MFA tokens.

Hidden text can fool AI summarizers into presenting ClickFix instructions to users.

Go module works as advertised as a brute-force tool while secretly exfiltrating credentials.

The emerging ransomware group makes initial access through RDP via compromised accounts.

UpCrypter malware deploys various RATs, including PureHVNC, DCRat, and Babylon RAT.

The draft guide makes several major changes and additions to the version published in 2021.

Targeted social engineering campaign by Shamos once again shows how human beings are an enterprise’s weakest link.