Exclusive articles:
Backdoor Flaw Hits 20,000 WordPress Sites, Enables Stealthy Admin User Creation
A critical backdoor vulnerability in the LA-Studio Element Kit for Elementor WordPress plugin exposes over 20,000 active installations to unauthenticated attacks.
Discovered on January...
MacSync macOS Infostealer Uses ClickFix Tactic To Hijack Terminal Pastes
A phishing campaign mimicking Microsoft logins at crosoftonlinecom/login.srf, redirecting to macclouddrivecom/s2/, a ClickFix lure disguised as macOS cloud storage.
Victims are tricked into pasting a...
EmEditor Users Targeted In New Watering Hole Attack Delivering Stealer Malware
A sophisticated watering hole attack targeting EmEditor users, a popular Windows text editor favored by developers, especially in Japan.
In late December 2025, attackers compromised...
New Phishing-as-a-Service Kit Targets Google, Microsoft, and Okta Users
A multiple custom phishing kits sold as-a-service, specifically tailored for vishing campaigns against Google, Microsoft, Okta, and cryptocurrency providers.
These advanced tools empower voice-based social...
Hackers Weaponize GenAI To Turn Clean Webpages Malicious In Seconds
Cybercriminals are exploiting generative AI (GenAI) to transform innocent-looking webpages into sophisticated phishing traps in real time.
According to new research from Palo Alto...
