Malicious npm packages targeting Cursor macOS users stole credentials and disabled updates, impacting 3,200+ downloads.

Supply chain attack compromises the popular rand-user-agent scraping NPM package to deploy and activate a backdoor.

Dangerous Linux malware, capable of bricking servers, has been found in Golang modules on GitHub, experts are saying.

A 25-year-old California man will plead guilty to hacking into a Disney's personal computer and using stolen credentials to break into thousands of Disney Slack channels. Ryan Mitchell Kramer, who ...

Cloud breaches are no longer limited to misconfigured storage buckets. As infrastructure migrates to the cloud, attackers are ...

Several malicious PyPI packages were recently observed abusing Gmail to exfiltrate stolen sensitive data and communicate with ...

Malicious Go and PyPI packages use Gmail and wget to exfiltrate data, wipe Linux disks, and hijack crypto credentials.