Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.

Google pushed an emergency patch for a high-severity Chrome flaw, already under active exploitation. So it's time to make ...

RevengeHotels used AI-generated phishing scripts to deploy Venom RAT in Brazil hotels in 2025, stealing travelers’ credit ...

Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on Monday, which targeted Ethereum ...

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel series — because it publishes any stolen credentials in a new public GitHub ...

Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging ...

Apple today released a new update for Safari Technology Preview, the experimental browser that was first introduced in March ...

Google is rolling out updated versions of Chrome to the masses, signaling that attackers are exploiting a newly discovered ...

VirusTotal has discovered a phishing campaign hidden in SVG files that create convincing portals impersonating Colombia's ...

The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security ...

A massive Android ad fraud operation dubbed "SlopAds" was disrupted after 224 malicious applications on Google Play were used ...