Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building ...
GlassWorm uses Solana and Google Calendar dead drops to deliver RAT stealing browser data and crypto wallets, impacting ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...
Claude extension flaw enabled silent prompt injection via XSS and weak allowlist, risking data theft and impersonation until ...
Claude extension flaw allowed zero click attacks, letting hackers inject commands and access sensitive user data.