Microsoft's June Patch Tuesday fixed a record 206 vulnerabilities, including an actively exploited Windows Defender flaw.

TL;DR  Introduction  At the start of this year, I wrote a blog on how 2025 was the ‘year of the infostealer’, and it doesn’t ...

GitHub will change npm's defaults so the install command no longer runs scripts automatically, disabling a feature commonly ...

Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.

The FTC is warning about fake CAPTCHAs that install malware to steal your passwords and banking credentials. Here's how to ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Reaper malware targets macOS users via Script Editor to steal crypto wallets, browser passwords, and sensitive files.

Tech giant IBM is warning of a new cyberattack campaign that traps banking customers inside fake browser screens while ...

A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with ...

GitHub disabled 73 Microsoft repos after the Miasma worm exploited previously compromised credentials to plant malware targeting AI coding agents.

The hackers abused legitimate platforms to run the credit card theft campaign.

Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting 32 maliciously modified packages across more than 90 versions under the @redhat-cloud-services npm scope. The ...