Alessandro Mascellino

Written by A TrickBot variant has been observed swapping the HTTP command-and-control (C2) channel the malware has used for the better part

Written by A phishing-as-a-service (PaaS) platform has been observed building a unique login page for each victim in real time, pulling a

Written by Adversary-in-the-middle (AiTM) phishing has become the single most common way attackers break into law firms, overtaking conventional

Written by Captive portals on hotel and conference Wi-Fi networks have been hijacked to route guests through attacker infrastructure, serving

Written by Criminals have been defeating the safety controls on commercial AI tools by splitting malicious work across multiple sessions

Written by A WhatsApp scam has been spreading through hijacked accounts by asking recipients to vote for a friend in an online contest, then tricking them into authorizing an attacker's device on their own account.

Written by Three vulnerabilities in an open-source AI agent orchestration platform have exposed sensitive data and allowed unauthenticated

Written by Counterfeit extensions impersonating real developer tools have been found on the Open VSX registry, with roughly a quarter of

Written by The group behind March's cascading supply chain attacks on open-source developer tools has been linked to infrastructure attacks

Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database