CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

The once infamous peer-to-peer file sharing program LimeWire purchased the Fyre Festival brand for $245,000 in July.

A rare in-the-wild FileFix campaign has been observed by cybersecurity researchers, which hides a second-stage PowerShell ...

The bundle.js script is designed to steal npm, GitHub, AWS and GCP tokens. But it also installs TruffleHog – an open source ...

A massive Android ad fraud operation dubbed "SlopAds" was disrupted after 224 malicious applications on Google Play were used ...

Having trouble getting into your MEGA account? It happens. Maybe the login page is just a blank white screen, or perhaps ...

Phishing campaigns are no longer the clumsy scams filled with typos that users once learned to spot. Security researchers ...

Programmers using popular AI tools (Cursor, Windsurf, VSCode) get their crypto stolen by hackers, who infiltrate extension marketplaces.

Hulud" has compromised hundreds of packages in the npm repository with a self-replicating worm that steals secrets like API key, tokens, and cloud credentials and sends them to external servers that ...

Apple today released a new update for Safari Technology Preview, the experimental browser that was first introduced in March ...