Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging items. Cybersecurity researchers VirusTotal spotted the malware after adding ...

Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal ...

CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.

A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this ...

North Korea’s Contagious Interview spreads AkdoorTea and TsunamiKit to steal crypto and infiltrate global developers.

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

A rare in-the-wild FileFix campaign has been observed by cybersecurity researchers, which hides a second-stage PowerShell ...

Blockstream issued an urgent security alert warning users about a sophisticated phishing campaign targeting Jade hardware ...

Claude AI can now create and edit documents, spreadsheets, and other files. But Anthropic warns that hackers could snag your sensitive data.

New UI component collection and document SDKs streamline options and offer increased flexibility for customers ...