Explores turning the browser into a policy enforcement point within a Zero Trust framework, covering governance, MFA, device ...

ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push ...

Vault12 announced today the open-source release of electron-webauthn-mac, a native WebAuthn/Passkey implementation for Electron apps on macOS only that ports Apple's platform authenticators (Touch ID ...

Veratad Technologies, a global leader in secure age and identity verification solutions, today announced a significant expansion of its IDMax(SM) reusable digital identity credentials network through ...

A malicious Chrome extension posing as a trading tool steals MEXC API keys, enables withdrawals, and sends credentials to ...

Pi Network has launched its first update of 2026, adding a new developer library to make Pi payments easier and faster to ...

NordPass, a leading password manager, simplifies secure logins by including Authenticator on multiple devices in the application for personal use. The time-based one-time ...

The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...

First 2026 cyber recap covering IoT exploits, wallet breaches, malicious extensions, phishing, malware, and early AI abuse.

DuckDB has recently introduced end-to-end interaction with Iceberg REST Catalogs directly within a browser tab, requiring no ...