A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

Claude Mythos autonomously found zero-days in OpenBSD, FFmpeg, FreeBSD and major browsers that survived decades of expert ...