Activate subscription >
Add devices or upgrade >
Renew subscription >
Secure Hub >
Don’t have an account? Sign up >
< Products
< Resources
< Help
Scammers exploited a PayPal subscriptions feature to send legitimate emails from service@paypal.com, using fake purchase notifications to push tech support scams.
Criminals make malicious ChatGPT and Grok conversations appear at the top of common Google searches—leading users straight to the Atomic macOS Stealer.
Researchers have found Android malware that holds your files and your device hostage until you pay the ransom.
If we’re lucky, this update will close out 2025’s run of Chrome zero-days. This one is a V8 type-confusion issue already being exploited in the wild.
The update patches three zero-days and introduces a new PowerShell warning meant to help you avoid accidentally running unsafe code from the web.
GhostFrame uses dynamic subdomains and hidden iframes to help attackers slip past basic security tools.
The NCSC warns that prompt injection is unlikely to be mitigated in the same way SQL injection was. How do they compare?
We found a campaign that hosts fake login pages on Cloudflare Pages and sends the stolen info straight to Telegram.
Family photos pulled from social media are being used as "proof-of-life" in virtual kidnapping scams, the FBI warns.
Contributors
Threat Center
Podcast
Glossary
Scams