SVG phishing email attacks are bypassing enterprise email security gateways by hiding JavaScript inside image files and ...

Validity’s Guy Hanson explains how AI, DMARC, inbox placement and engagement-based filtering are changing B2B email ...

Google has released a Chrome 148 update that resolves 79 vulnerabilities, including 14 critical-severity security defects.

The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine. Active since at least 2016, Ghostwriter has been ...

Data Security Standard (DSS), issued by the PCI Security Standards Council (SSC), which establishes technical and operational requirements to protect cardholder data and promote consistent security ...

CVE-2025-12735 in expr-eval allows remote code execution via unsafe input evaluation Vulnerable versions ≤2.0.2; patched in 2.0.3 and forked in expr-eval-fork 3.0.0 Developers should sanitize ...

A new phishing and malware distribution toolkit called MatrixPDF allows attackers to convert ordinary PDF files into interactive lures that bypass email security and redirect victims to credential ...

The Nigeria Customs Service (NCS) has instructed all shortlisted applicants in its ongoing recruitment exercise to validate their email addresses on their profiles. The directive was issued on ...

Really Simple Validation (RSV) is a tried-and-tested javascript validation library I wrote back in the late paleolithic era. Additional code contributed by Mihai Ionescu and Nathan Howard. This ...

Cybersecurity researchers are calling attention to a new type of credential phishing scheme that ensures that the stolen information is associated with valid online accounts. The technique has been ...