News Fake Google Security site uses PWA app to steal credentials, MFA codes
A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time...
credentials
News 
News How infostealers turn stolen credentials into real identities
Modern infostealers have expanded credential theft far beyond usernames and passwords. Over the past year, campaigns hav...
News Passwords to passkeys: Staying ISO 27001 compliant in a passwordless era
One morning, you wake up and realize that your business has grown to the point where you can no longer afford to get int...
News 人気のAIアプリを通じてmacOSを狙うAMOSの情報窃盗犯
Atomic MacOS Stealer（AMOS）のような情報窃取ツールは、単体のマルウェアをはるかに超えた存在です。それらは、盗まれたデジタルIDの収集、取引、運用を中心に構築された成熟したサイバー犯罪経済の基礎的な構成要素です。 最新...
News SolarWinds warns of critical Web Help Desk RCE, auth bypass flaws
SolarWinds has released security updates to patch critical authentication bypass and remote command execution vulnerabil...
News Why Active Directory password resets are surging in hybrid work
Back when everyone worked in the office, password resets were annoying but manageable. If someone forgot their credentia...
News You Got Phished? Of Course! You’re Human…
You may have heard this type of phishing story before: an ordinary, careful user who let their guard down for a moment. ...
News Make Identity Threat Detection your security strategy for 2026
Attackers no longer break in, they log in. To defend against compromised accounts and insider threats, organizations nee...
News Code beautifiers expose credentials from banks, govt, tech orgs
Thousands of credentials, authentication keys, and configuration data impacting organizations in sensitive sectors have ...
News Passwork 7: Self-hosted password and secrets manager for enterprise teams
Author: Eirik Salmi, System Analyst at Passwork Organizations manage credentials across distributed teams, applications,...