A malicious change was made to the legitimate QuickFox VPN installer, allowing it to secretly download a backdoor onto ...

Microsoft Threat Intelligence observed a macOS ClickFix campaign distributing infostealers, including MacSync and Atomic Stealer (AMOS), through a large cluster of look-alike domains. The campaign ...

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track ...

Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...

With 3.5 billion active users to protect, Google is relying on Gemini to find Chrome security bugs fast - and before ...

Founded in 2011, Black Girls Code has spent more than a decade trying to change who gets a seat at the table in tech.

Attackers altered Adform's trackpoint-async.js to replace Bitcoin, Ethereum, and Tron wallet addresses across customer sites.

The state will try again to execute Jeffery Lee — this time, by lethal injection — after courts said doing so using nitrogen gas was “likely unconstitutional.” By Rick Rojas See more of our coverage ...

Gov. Ron DeSantis has issued a death warrant for Harold Gene Lucas for a murder he was convicted of nearly 50 years ago.

Amazon Threat Intelligence has tied a DPRK hacking group to four separate npm package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...