The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

JadePuffer could be the first reported case of a ransomware attack driven by AI from start to finish. How can businesses ...

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into ...

North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

The first AI agent ran a ransomware attack end to end, signaling a shift to machine-speed cyberattacks and autonomous defense ...

Snipping Tool is not a new feature of the Windows operating system and most users have been using this tool to take screenshots of their screen for a while now. However, most users are unaware that ...

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.