Discord users are facing a growing wave of account hijackings that turn their profiles into tools for cybercriminals spreading scams.

What happened Threat actors are actively exploiting an unauthenticated information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on more than 100,000 WordPress ...

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the ...

Gravity SMTP WordPress vulnerability CVE-2026-4020 has drawn 17 million automated exploit attempts since May 2026, draining ...

What happened Attackers are abusing legitimate Microsoft 365 accounts to scale a phishing operation known as CodeStorm. Instead of relying only on fake sender infrastructure, the attackers hijack real ...

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication ...

None ...

Kaspersky reports ToddyCat’s Umbrij abuses headless Chromium and OAuth flows to extract Gmail authorization codes, enabling ...

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Once upon a time, there was a bit of a fad for fingerprint authentication in laptops and desktop computers. It has long since ...

ShinyHunters use tactics including stolen credentials, compromised OAuth tokens, social engineering, vishing, and abuse of ...

We're taking an early look at how Google's upcoming Android 17 OS verification feature will check that your phone's software ...