Over 4,000 Microsoft accounts compromised by a malicious Outlook add-in that hijacked an abandoned scheduling tool to steal credentials via a phishing kit..

A hacker noticed the change in its status and hijacked the dead add-in and its 4.71-star rating to conduct a phishing campaign that the company which uncovered the attack, plug-in security company Koi ...

A Microsoft Outlook add-in was abandoned and taken over by hackers, who used it to collect email accounts and banking data.

Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions that are advertised as artificial intelligence (AI)-powered coding assistants, but also harbor ...

Security teams at agile, fast-growing companies often have the same mandate: secure the business without slowing it down. Most teams inherit a tech stack optimized for breakneck growth, not resilience ...