A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...
Researchers found 15 malicious JetBrains plugins posing as AI coding tools that exfiltrate OpenAI, DeepSeek, and SiliconFlow ...
North Korea-linked ScarCruft uses fake Microsoft Account alerts and ZIP files to deliver NarwhalRAT, a Python RAT built for ...
Chainguard will use AI to protect open-source code. Athena pools open-source users, developers, and maintainers. Others are ...
A new iOS exploit kit named DarkSword is targeting millions of unpatched iPhones by compromising websites, stealing sensitive data without leaving traces. This powerful tool exploits six iOS ...
The Ministry of External Affairs of India said it is closely monitoring developments in Nepal following widespread protests by Gen Z groups against corruption, which have resulted in multiple ...
Once accepted, the attackers tell developers to download a Node.js project as part of a practical test. The trojanized project on launch deploys a RAT and infostealer malware targeting all major OS ...
Some 31,000 employees’ accounts were compromised by malware in Vietnam last year, a 31-fold jump from 2020, according to Russian cybersecurity firm Kaspersky. The data was contained in a report ...
FBot is a Python-based hacking tool distinct from other cloud malware families, targeting web servers, cloud services, and SaaS platforms like AWS, Office365, PayPal, Sendgrid, and Twilio. FBot does ...