A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

The FBI warns that malicious actors are now sending fraudulent messages pretending to be from “senior U.S. officials,” but ...

Security researchers are warning WhatsApp users about a growing account hijacking technique that does not rely on breaking passwords or bypassing encryption. Attackers exploit WhatsApp’s legitimate ...

A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...

Proofpoint has warned about phishing campaigns abusing legitimate device authorization flow to bypass MFA and gain persistent ...

Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign ...

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

America’s cyber defense agency now warns Google, Microsoft and Apple users to secure their accounts — change passwords, remove SMS two-factor authentication and add passkeys. But hackers are quickly ...

As you prepare to spend time with loved ones, FBI Atlanta says it can be a good time to talk about scams. Here's how ...

In an era of AI-enabled deception, authenticity can no longer be assumed, even when the voice on the other end sounds exactly ...

To protect themselves from the ghost attack, TGCSB director Shikha Goel asked people not to share OTP, PIN, CVV, or WhatsApp ...