Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

Google is rolling out updated versions of Chrome to the masses, signaling that attackers are exploiting a newly discovered ...

Apple today released a new update for Safari Technology Preview, the experimental browser that was first introduced in March ...

Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on Monday, which targeted Ethereum ...

VirusTotal has discovered a phishing campaign hidden in SVG files that create convincing portals impersonating Colombia's ...

RevengeHotels used AI-generated phishing scripts to deploy Venom RAT in Brazil hotels in 2025, stealing travelers’ credit card data and evading defens ...

Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging ...

A massive Android ad fraud operation dubbed "SlopAds" was disrupted after 224 malicious applications on Google Play were used ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security ...