The Chinese APT group Lotus Blossom intruded the tool’s internal systems to snoop on a limited set of users’ activities, according to researchers.

A threat actor is seeding the internet with AI browser extensions that can intercept a user’s authenticated session tokens and hijack accounts.

Passwordless authentication standards have improved identity security, but new research indicates this technology is vulnerable to token hijacks and man-in-the-middle attacks.

Policymakers and researchers have sharply criticized Microsoft’s security practices after an illicitly obtained key enabled a wide-ranging espionage operation. 

It highlights the big payouts Apple has been offering through a bug bounty program it expanded last year.

It's the latest anti-phishing effort from Google's Advanced Protection team.

Trusona is working with the likes of Microsoft and the health care company Aetna.

The vulnerability would require an outsider to already have obtained a victim's username and password.