How We Added WebAuthn to a Browser-Based RDP Client
The Pitch TL;DR: We built the first RDP client outside of Windows to support WebAuthn redirection, beating Microsoft’s own macOS, iOS and Linux clients to…
Latest Cybersecurity News — Page 5
View all →
Newly discovered PamStealer isn’t your typical macOS malware
Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs with stealthy, custom-developed credential-stealing code. The…
Agentic Browser Security: 2025 Year-End Review
An Agentic Browser is an AI-powered co-pilot that not only reads the web, it acts on it. By understanding page content and executing multi-step tasks…
New Cargo Theft Surge: From Lobster Heists To Bourbon Warehouse Scams
Illustration of a long shadow truck with a thief getty Last January, I told you about the great lobster heist where criminals stole 40,000 pounds…
ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds
It can start with something as mundane as dragging a link into your browser. Three seconds later, a threat actor has the tokens needed to…
Microsoft 365 Phishing Panel Uses OAuth Device Code Flow to Capture Tokens and Persist Access
A newly uncovered phishing panel called ARToken is giving cybercriminals an easy way to steal Microsoft 365 login sessions without ever touching a password. The…
FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security
The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy…
Phishing Campaign Uses Fake Invoice PDF to Drop AsyncRAT, VenomRAT, and XWorm
A sophisticated phishing campaign that uses a fake invoice PDF to mask the delivery of multiple remote access trojans primarily AsyncRAT, but also VenomRAT and…
VMware Licensing Changes and Their Impact on Infrastructure Modernization
If your VMware renewal landed on your desk this year and made you choke on your coffee, you’re not alone. Finance teams across the world…
New iboss platform gives organizations instant visibility into AI tools and usage
iboss has launched the AI Security Platform, a new service that gives any organization visibility into the AI tools its people are using, free of…
Fake Google and Cloudflare verification pages spread multiple malware families
ClickFix attacks, which trick people into running malicious commands themselves, continue to evolve. This latest campaign uses fake Google and Cloudflare verification pages to convince…
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Swati KhandelwalJul 02, 2026Cybercrime / Botnet Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other…