The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver a new ...

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a ...

A few months ago I built a research agent that looked fine in a demo. Then someone asked about a product that had launched three weeks earlier. The agent guessed. The LLM was not the problem. It did ...

A new mass smishing campaign uncovered by Bitdefender Labs shows that scammers are sending tens of thousands of fraudulent text messages to mobile users across 12 countries, impersonating transport ...

Email subscription bombing (also known as subscription flooding or email spam bombing) is an attack technique that overwhelms a target’s inbox with a high volume of benign but unwanted emails. The ...

Mobile security often is tighter than PC security, but users can still be fooled by social engineering techniques, and smartphones can still be hacked. Here’s what to watch out for. The smartphone ...

Most people don’t think about app security until it’s too late. You tap “install,” grant a few permissions, log in, and trust the app to behave. But behind ...

In this blogpost we discuss an uncommon type of phishing campaign targeting mobile users and analyze a case that we observed in the wild that targeted clients of a prominent Czech bank. This technique ...

I've archived this repo to mark that I'm not going to be maintaining it. It's open-source so anyone using it can fork or take it over. Thank you to all the people that contributed to it in the past ...

Full-stack. Remote-work. Based in Phoenix, AZ. Specializing in APIs, service integrations, DevOps, and prototypes. Have you ever wondered how some of your favorite apps handle real-time updates? Live ...

ESET researchers have identified five campaigns targeting Android users with trojanized apps. Most probably carried out by the Arid Viper APT group, these campaigns started in 2022 and three of them ...

This is the Python server SDK to help you use Vonage APIs in your Python application. To use it you'll need a Vonage account. Sign up for free on the Vonage site. This SDK includes support for the ...