Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.

IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

ClickFix attacks are delivering BabaDeda, Lorem Ipsum, and Potemkin loaders to deploy stealers, RATs, and ransomware-linked ...

Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.

NET 11 Preview 5 focuses on under-the-hood runtime performance gains, streamlined APIs and language features that reduce boilerplate, plus built‑in security checks and incremental ASP.NET Core and EF ...

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain ...

Over 100 NPM and PyPI packages were injected with malicious code in the Miasma and Hades Shai-Hulud supply chain attack ...

There's another likely North Korean-linked scam hitting developers and their employers, while snarfing up credentials and ...

To reach protected secrets, the macOS and Linux versions show a fake password dialog, then reuse the captured password to ...

Plus: Hackers use Meta’s AI bots to hack Instagram accounts, Anthropic helps NSA hackers, a decades-long GPS satellite ...

An emerging wave of rather concerning online theft is leveraging one of the Fintech sector’s most widely used platforms in order to conceal and reportedly distribute malicious code designed to harvest ...

Red Hat hit by npm supply‑chain attack - here's how to stay safe ...