Socket’s Threat Research Team has uncovered an active and expanding malware campaign in the npm ecosystem. More...
cybersecurity
Recorded Future’s Insikt Group has uncovered a new cyber-espionage campaign by Russia-aligned threat actor TAG-110 targeting public...
LayerX has uncovered more than 40 malicious browser extensions involved in three coordinated phishing campaigns—many still live...
Threat actors have ramped up a new social engineering campaign, dubbed “ClickFix,” where fake CAPTCHA prompts embedded...
In recent breach incidents, threat actors have evolved their methods beyond traditional intrusion tactics, now opting for...
Sekoia.io’s Threat Detection & Research (TDR) team has unveiled a novel adversary, dubbed “ViciousTrap”, that hijacks compromised...
ABB has issued a comprehensive cybersecurity advisory revealing 32 security vulnerabilities impacting its ASPECT Building Management System...
Trend Micro reveals a growing threat on TikTok, where AI-generated videos deceive users into running malicious PowerShell...
Europol and Eurojust have dismantled the digital backbone of several major malware strains used in ransomware operations....
Security researchers have identified a database containing a staggering 184 million account credentials—prompting yet another urgent reminder...
A newly disclosed and highly critical vulnerability, tracked as CVE-2025-4978 with a CVSSv4 score of 9.3, has...
The Rhadamanthys stealer, a notorious information-stealing malware, has returned with a new wave of targeted phishing attacks...
The Wordfence Threat Intelligence Team has uncovered a new and deeply stealthy formjacking malware targeting WooCommerce, the...
Canon has issued a security advisory warning customers about two high-severity vulnerabilities—CVE-2025-3078 and CVE-2025-3079—that affect a range...
In a disturbing development for the JavaScript community, Socket’s Threat Research Team has uncovered a stealthy and...
A newly identified Chinese-speaking threat actor cluster, tracked as UAT-6382, is actively exploiting a zero-day vulnerability in...
Google has released a Stable Channel update to version 137.0.7151.40/.41 for Windows and Mac as part of...
Versa Concerto, a popular SD-WAN and network orchestration platform used by large enterprises and governments, is under...
Grafana Labs issued an unscheduled security release—Grafana 12.0.0+security-01—alongside patches for all supported versions, addressing a high-severity cross-site...
GitLab announced the release of versions 18.0.1, 17.11.3, and 17.10.7 for both its Community Edition (CE) and...
Kaspersky Labs has uncovered a disturbing new malware campaign that turns exposed Docker containers into self-replicating Dero...
The U.S. National Institute of Standards and Technology (NIST) is proposing a metric to address one of...