Latest

Click Studios, developer of the corporate password manager Passwordstate, has urged customers to immediately install a patch addressing a critical authentication bypass vulnerability. What Passwordstate Does Passwordstate functions as a centralized, web-based password vault. It allows organizations to securely store and manage passwords, API keys, certificates, and other credentials. The

In June 2025, researchers identified a new wave of malicious activity they dubbed Phantom Papa. Threat actors were distributing emails in both Russian and English, with attachments that delivered a new stealer malware called Phantom. Technical Capabilities Phantom is built on the codebase of Stealerium, a known stealer, and is

Last week it was revealed that hackers compromised the Salesloft sales automation platform, stealing OAuth and refresh tokens from its AI agent Drift—an integration tool for Salesforce. Google has now confirmed that the breach was far more extensive, with attackers also accessing Google Workspace data. How the Breach Unfolded

WhatsApp developers have patched a zero-day vulnerability affecting versions of the messenger for iOS and macOS. According to the company, this issue—together with a recently disclosed Apple bug—may have been used in “sophisticated attacks targeting specific users.” The flaw, tracked as CVE-2025-55177, received a CVSS score of 8.

A newly patched vulnerability in Mozilla Firefox could have allowed attackers to steal credentials and redirect users to phishing pages by injecting malicious code into a compromised website. The flaw, discovered by Positive Technologies expert Daniil Satyaev, was assigned the identifier CVE-2025-6430 (PT-2025-30487) and rated 6.1 on the CVSS

Microsoft has denied reports that the August security update KB5063878 caused failures and data corruption in solid-state drives (SSDs) and hard disk drives (HDDs). According to company representatives, engineers found no evidence linking the update to the issues described by customers. Speculation about a possible connection first surfaced two weeks

In August, Electronic Arts (EA) announced that players participating in the Battlefield 6 open beta on PC would need to enable Secure Boot in both Windows and BIOS settings. The decision immediately sparked controversy, with many players concerned about granting EA’s anti-cheat software such deep access to their systems.