Guides

Security firm runZero disclosed seven vulnerabilities in FatFs, a filesystem library embedded in cameras, drones, and industrial controllers. No upstream fix ex

Russia targeted Signal and WhatsApp accounts of officials and activists across Ukraine, Europe, and the U.S. via SMS phishing posing as platform support bots.

45% of SMBs suffered a cyber incident last year, yet confidence in resilience has surged. Here's where readiness stands and what comes next.

BleepingComputer hosts a July 8, 2026 webinar on account takeover threats and how behavioral AI can automate detection and response.

The Gentlemen RaaS group maintains a suite of EDR-killing tools, led by GentleKiller, targeting over 400 processes across 48 security vendors.

ESET researchers detail the EDR-killing toolset of ransomware gang Gentlemen, including their in-house GentleKiller framework and integrated third-party tools.

EvilTokens abuses Microsoft's OAuth device code flow to compromise accounts without fake login pages or stolen passwords, bypassing 2FA entirely.

INTERPOL's Operation Ramz disrupted Sniper Dz, a decade-old PhaaS platform, resulting in 201 arrests across 13 MENA countries and the takedown of its infrastruc

Pro-Iranian hackers exploited Meta's AI support bot to reset Instagram passwords. Enabling any form of MFA blocked the attack entirely.

Scammers are running fake FIFA World Cup 2026 sites to steal money and personal data. Here's how the fraud works and how to avoid it.

ESET researchers detail Webworm's 2025 campaigns targeting European governments, featuring new Discord and Microsoft Graph API backdoors.

Hardware security keys add phishing-resistant authentication to SSH. Here's how to configure one on Linux using FIDO2.