Scroll down for all the latest web application security news and information.
Subscribe to our weekly newsletter for the latest in industry news, expert insights, dedicated information security content and online events.
Pro-Russia hacktivist groups have been observed exploiting exposed virtual network computing connections to breach OT systems
December’s Patch Tuesday sees the release of patches for over 50 CVEs including three zero-days
New phishing domains point to a campaign from the notorious Scattered Lapsus$ Hunters collective
Trustwave SpiderLabs has observed new banking Trojan Eternidade Stealer targeting Brazil using WhatsApp for propagation and data theft
Experts have uncovered large-scale phishing exploiting Booking.com, Airbnb and Expedia accounts, targeting hotels and customers
A previously unknown cyber actor UNK_SmudgedSerpent has been observed targeting academics with phishing and malware, merging techniques from Iranian groups