Update Jan. 16 at 11 pm: This article has been updated to include responses from CertiK and PeckShield. Losses to crypto scams, exploits and hacks tapered off in the last months of 2024, with December ...

Threat actors’ abuse of legitimate Microsoft tools rose by 51% in the first half of 2024 compared to 2023, according to Sophos’ latest Active Adversary Report. The researchers observed 187 unique ...

Real-world asset protocols present an “evolving” threat landscape that offers a larger attack surface for hackers, according to CertiK. Cryptocurrency hackers are targeting real-world asset (RWA) ...

A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka "LDAPNightmare") on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server. The ...

Thousands of sites running WordPress remain unpatched against a critical security flaw in a widely used plugin that was being actively exploited in attacks that allow for unauthenticated execution of ...

A proof-of-concept (PoC) exploit for a critical-severity remote code execution flaw in Progress WhatsUp Gold has been published, making it critical to install the latest security updates as soon as ...

Kate Klonick and coauthors test the hypothesis that misinformation exploits outrage to gain traction online. "Because outrage is associated with increased engagement online, outrage-evoking ...