UAT-11985 targets Taiwan research affiliates with fake event invites that lead to AitM pages designed to capture Google ...

The game "1 in 8 Billion" is a hot topic on social media.Today, during my lunch break, I played it quickly and casually. It's ...

BeyondTrust patches CVE-2026-102764, a Remote Support zero-day China-linked ARMORY CASTLE used to deploy SAWFLY and BARECLAW malware.

A new open-source tool uses neural embeddings to index 1.29 million code entities across more than 2,500 MediaWiki ...

Tensorlake npm SDK 0.5.144 was compromised in a ChainDrop supply chain attack, delivering an obfuscated credential-stealing ...

Malicious tensorlake npm version 0.5.144 contained a Shai-Hulud worm that harvests credentials and can republish compromised ...

GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.

Researchers found a way around Manus' guardrails and got it to execute a simple email prompt injection attack.

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than ...