Healthcare tech company Astrana Health reports a data breach resulting from a social engineering and vishing campaign that compromised confidential...

A mundane, ubiquitous example URL embedded within countless developer documentation files has horrifyingly metamorphosed into a live attack vector. The specific domain, third-party[.]com, historically utilized by developers for years as a benign, illustrative placeholder for external services, has been actively serving malicious content since at least June 2026. Explicitly targeting Windows environments, the compromised domain presents users with a fraudulent Cloudflare verification challenge, utilizing advanced social engineering to coerce them into manually executing a destructive command via the Windows "Run" dialog.

The healthcare and pharmaceutical sectors are being targeted by a wave of social engineering and vishing attacks from groups like ShinyHunters, warns...

The iPhone has acquired a formidable defense against attacks that circumvent traditional device compromise: iOS 27 now intelligently detects subtle indicators that a legitimate owner is being actively coerced into transferring funds, altering passwords, or executing other high-risk actions. Apple recently detailed the Impersonation Risk Detection feature, a sophisticated mechanism engineered to thwart active social engineering schemes. This novel safeguard fortifies a glaring vulnerability within conventional authentication paradigms.

EU companies endure cyber threats from DDoS attacks, ransomware, supply chain breaches, phishing and growing misuse of AI systems.

A simple phishing email now delivers DarkMe RAT, as attackers swap costly zero-day exploits for high-volume attacks on corporate targets.

CSC report says AI heightens online intellectual property risk as businesses fight phishing, impersonation and major domain abuse.

Attackers are courting crate owners with plausible company profiles and booby-trapped recruitment calls

AI, fake uniforms, and mock offices help crooks sell the con

How North Korea's Contagious Interview scam targets developers and infiltrates companies - plus defenses for both.

Sicherheitsbehörden warnen vor einer Cybergruppe aus Nordkorea, die gezielt IT-Spezialisten angreift. Was hinter der Kampagne „Contagious Interview“ steckt.