A macOS ClickFix campaign uses more than 250 domains and server-side fingerprinting to hide AMOS lures from crawlers and ...

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

A malicious change was made to the legitimate QuickFox VPN installer, allowing it to secretly download a backdoor onto Windows PCs, according to Fortinet.

I tested five antivirus programs on one PC in 2026. Norton 360 is the fastest, Bitdefender the lightest, and Avast the best ...

Hackers are targeting networks at hotels, conference centers, and airports.

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

Another Shai-Hulud variant hits npm packages, worming its way into hundreds of packages.

A hijacked GitHub account let the Shai-Hulud worm pass npm's trust check, spreading through packages with 2 billion monthly ...

Menlo Security has expanded Menlo Agent Runtime Security, or MARS, with controls aimed at protecting AI assistants and coding ...

Uppsala Security, a Singapore-based blockchain intelligence and crypto forensics company, announced today that it has joined the Cyber Threat Alliance (CTA) as an Affiliate Member, becoming the first ...

Malware infected at least 444 npm packages spanning 2,000 versions, threatening software with over two billion monthly installs. Attackers compromised maintainer Jared Wray's account, then used stolen ...

Russian state-sponsored hackers have been compromising hotel Wi-Fi networks worldwide to steal login details and infect ...