Passkeys pass 5 billion in use as phishing-proof login goes mainstream
FIDO Alliance says 5 billion passkeys are now active worldwide as adversary-in-the-middle phishing kits make traditional MFA codes and push…
The $25 million deepfake call that changed how firms verify payments
A Hong Kong finance worker wired $25 million after a video call with deepfaked executives. The case, and a separate…
AI is now a tool for both attackers and defenders, vendors say
Anthropic, OpenAI, Google and Microsoft have each published documented cases of attackers using AI models for hacking in 2025, alongside…
CISA gave agencies three days to patch a SharePoint flaw
CVE-2026-58644 was patched on July 14, 2026, exploited a day later and added to CISA's KEV catalog on July 16…
Stolen logins became the cheapest way into a company
Infostealers infected 7.4 million devices and harvested 1.7 billion credentials in the first half of 2026. Published threat intelligence shows…
npm’s worm problem outran the registry’s own security fix
Months after npm revoked long-lived publishing tokens, the May 2026 Mini Shai-Hulud wave hit 169 packages by abusing the OIDC…
Ransomware payments fall as fewer victims agree to pay up
Ransomware payments fell to about $820 million in 2025 while claimed attacks rose 50%. Coveware logged a record-low payment rate…
Origin Energy breach hits 900,000 and an offshore call center
Australia's largest energy retailer confirmed 900,000 customers had data accessed in July 2026, three weeks after dismissing an early warning.…