Signal phishing attack targets journalists, activists, and dissidents with fake support texts that steal backup recovery keys ...

Posing as Signal’s support team, scammers are asking users for their recovery keys—a ploy to download and decipher encrypted ...

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...

Thousands of men around the world, including in Australia, have formed online communities to trade in rape content and advice ...

Socket found seven malicious packages on PyPI The packages were abusing Gmail and WebSocket They were removed from the platform Several malicious PyPI packages were recently observed abusing Gmail to ...

Blue and green bubbles aside, texting your Android friends has never been safer. Discover the "lock" icon that just changed ...

Built on the Beldex Network, BChat aims to solve the weaknesses of relying solely on end-to-end encryption (E2EE) for private ...

Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by ...

Massive regional C2 footprint More than 1.3K C2 Servers Discovered in the Middle East Hunt.io said it identified more than ...

Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...

UPDATE (May 29, 2026): Google has brought several new features to the Google Messages app since we last updated this article. Scroll all the way down to get more information about the updates. Summary ...

Cybersecurity researchers at Aikido Security have uncovered a malicious supply chain attack targeting OpenAI Codex developers via the npm package “codexui-android”. While the associated GitHub ...