The popular WordPress plugin Gravity Forms has been compromised in what seems a supply-chain attack where manual installers ...

Critical vulnerability (CVE-2025-47812) in Wing FTP Server exposed to active exploitation via Lua injection. Immediate patching needed.

Learn how one overlooked flaw in OpenVSX discovered by Koi Secureity could've let attackers hijack millions of dev machines ...

According to researchers at Koi Security, the malicious extensions were part of a coordinated operation involving at least 18 known add-ons listed on the Chrome and ...

New research from Okta has uncovered a troubling trend: cybercriminals are now using generative AI tools, like Vercel’s v0.dev, to build phishing websites. These sites look almost exactly like real ...

Scammers have posed as AI and Web3 startups, spreading crypto-stealing malware through convincing fake websites and social ...