GlassWorm is evolving. Security researchers say the malware, which infiltrates code repositories with malicious extensions, can now deploy a RAT, is targeting MCP servers, and has a new way of moving ...
The good news is that agents of India are no longer involved in crimes against Canadians. Or maybe they are. From what the ...
DarkSword exploit targets iOS 18.4–18.7 using 6 flaws and 3 zero-days, enabling rapid data theft from iPhones across multiple ...
Lookout Threat Labs, and iVerify published coordinated research in March 2026 on DarkSword, a JavaScript-based full-chain ...
A cryptocurrency scam known as "ShieldGuard" has been dismantled after researchers identified it as a malicious browser ...
A large-scale GlassWorm malware campaign targeting developer platforms appears to be significantly more extensive and ...
Dozens of updated, malicious GlassWorm extensions have infested Open VSX, threatening software development supply chains.
GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
GitLab exposes abuse of its platform to trick software developers into downloading malicious payloads and finance companies ...
A multi-stage malware loader known as OysterLoader has continued to evolve into early 2026, refining its command-and-control (C2) infrastructure and obfuscation methods. The C++-based threat, also ...
Strip the types and hotwire the HTML—and triple check your package security while you are at it. JavaScript in 2026 is just getting started. I am loath to inform you that the first month of 2026 has ...