The phishing-as-a-service kit, run by a group known as the "Smishing Triad," has powered massive amounts of unpaid tolls and package tracking texts.

60 Minutes is under new management and things are getting stupid faster than you might expect. Last night’s episode featured President Trump, which is currently being described as “nuts.” There are all sorts of crazy moments to call out, but let’s start with the recursively meta nonsense. 60 Minutes edited out a segment where Donald Trump tells them to edit out a segment in which he brags about getting CBS to pay him because of them editing out part of an answer by Kamala Harris, and he notes that CBS clearly did the wrong thing in editing Harris in the same fucking sentence he tells them to edit out what he’s saying.

CVE-2025-54236 is a critical flaw in Adobe Commerce (formerly Magento) that allows attackers to remotely take over sessions on the e-commerce platform.

Researchers say exploitation of CVE-2025-10035 requires a private key, and it's unclear how Storm-1175 threat actors pulled this off.

A threat actor claimed 28,000 private repositories had been compromised, and the company said it had "initiated necessary remediation steps."

Researchers say the commercial adtech platform and several other companies form the infrastructure of a massive cybercrime operation.

Sean Cairncross, a political veteran without significant cybersecurity experience, could turn the relatively new White House office into a major player in the administration

Suspected China-nexus threat actors targeted virtual environments and used several tools and techniques to bypass security barriers and reach isolated portions of victims' networks.

In a recent intrusion, the notorious cybercriminal collective accessed CyberArk vaults and obtained more 1,400 secrets, subverted Azure, VMware, and Snowflake environments, and for the first known tim...