A convincing impersonation of TidBITS contributor Glenn Fleishman on our public Slack group fooled an experienced IT professional into installing the OSX.Odyssey infostealer. Because Slack is designed ...

North Korean criminals set on stealing Apple users' credentials and cryptocurrency are using a combination of social ...

Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.

Microsoft warns of a WhatsApp based malware attack targeting billions of users through fake files and social engineering ...

This shouldn’t work—but it absolutely does.

OS 26.4 update introduced security warnings into Terminal to prevent ClickFix attacks, so attackers have shifted to Script ...

Microsoft’s CA-2023 Secure Boot update broke PCs. Learn why UEFI firmware failed, how vendors reacted, and how to fix your boot issues.

AI-powered malware is transforming scam compounds into a global cybercrime industry fueled by trafficked workers and willing ...

Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote ...

Sara H. Jodka of Dickinson Wright PLLC discusses how routine website tracking technologies have been the subject of ...

UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply chains.

LinkedIn runs a hidden JavaScript script called Spectroscopy that silently probes over 6,000 Chrome extensions and collects ...