A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver ...
A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...
Iranian APT Infy resurfaced after years of silence, using updated Foudre & Tonnerre malware, phishing delivery, resilient C2 ...
Once considered dormant, the threat group has been quite active in evolving its techniques and tools, with updated malware for reconnaissance and data exfiltration.
New MacSync Stealer version is executed via a signed and notarized Swift application, eliminating the need for direct ...
Its researchers have not only uncovered a sprawling spyware campaign, but they're also keeping tabs on the ever-evolving ...
A new Shai-Hulud npm strain and a fake Jackson Maven package show how attackers abuse trusted dependencies to steal secrets ...
We’ve recently seen how ChatGPT was used to trick Mac users into installing MacStealer, and now a different tactic ...
Kaspersky has uncovered a new malware that hides within fake game mods and cheats to steal crypto wallet data and sensitive ...
Windows 10 is no longer going to receive free security updates in the future, but that doesn't mean you have to update to ...
A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication with the ...
The malware, a reworked version of the MacSync Stealer, departs from earlier delivery methods and adopts a quieter, more ...