npm granular access tokens configured to bypass 2FA can no longer create tokens, change maintainers, or manage org membership ...

OWAReaper abuses CVE-2026-42897 to steal OAuth tokens, alter mailbox permissions, and persist inside Exchange accounts.

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...

What started as tech industry-fueled springtime hype over squeezing as much AI-generated work as possible out of products has ...

Downtown Denver, amid vacancies, company headquarters departures and public safety concerns, has been a significant priority for city economic development officials. CBRE found that downtown’s ...

Arch Linux AUR malware has forced an emergency adoption freeze after Wave Three of the Atomic Arch campaign deployed a ...

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...

The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected ...

A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on ...

Sygnia, the world’s foremost incident response and cyber readiness team, revealed critical vulnerabilities following a ...

OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...

A security vulnerability in OWA allows JavaScript code execution by displaying emails. Russian actors are exploiting this.