Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.
The Iran-linked hacking group MuddyWater (a.k.a. Seedworm, Static Kitten) launched a broad cyber-espionage campaign targeting ...
OpenAI said it found no evidence that user data was accessed after a supply-chain attack involving the TanStack npm library.
Ghostwriter’s March 2026 Ukraine attacks use PDF lures and geofencing to deploy Cobalt Strike on government targets.