The disclosure comes as HelixGuard discovered a malicious package in PyPI named "spellcheckers" that claims to be a tool for ...

North Korean actors deployed 197 new npm packages delivering evolved OtterCookie and GolangGhost malware through fake ...

To safeguard against this line of attack, organizations are recommended to restrict B2B collaboration settings to only allow ...

Bloody Wolf targets Kyrgyzstan and Uzbekistan with Java-based loaders delivering NetSupport RAT in sector-wide phishing ...

Microsoft has announced plans to improve the security of Entra ID authentication by blocking unauthorized script injection ...

FBI flags $262M in account-takeover losses while researchers track AI-boosted phishing, fake stores, and holiday scam domains ...

According to information from Salesforce, reconnaissance efforts against customers with compromised Gainsight access tokens ...

"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...

Qilin has emerged as one of the most active ransomware operations this year, with the RaaS crew exhibiting "explosive growth" ...

RomCom just hit a US engineering firm via SocGholish for the first time, deploying Mythic Agent before defenders cut the ...

"Behind the interface, the extension injects an extra transfer into every Solana swap, siphoning a minimum of 0.0013 SOL or 0 ...

Malicious CGTrader .blend files abuse Blender Auto Run to install StealC V2, raiding browsers, plugins, and crypto wallets.