Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native to deliver malicious payloads for Windows and Linux.

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.

Julia Kagan is a financial/consumer journalist and former senior editor, personal finance, of Investopedia. Eric's career includes extensive work in both public and corporate accounting with ...