A widely used Python package was quietly turned into a weapon, and most developers who got hit had no idea it happened. On March 27, 2026, a threat...

Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows. This...

Threat actors impersonated CERT-UA to send phishing emails with AGEWHEEZE malware, tricking victims into installing a fake “security tool.” A...

A threat actor tracked as UNC6783 is compromising business process outsourcing (BPO) providers to gain access to high-value companies across...

Harvard University is warning of a targeted phishing campaign where attackers impersonate IT staff via phone calls and fake websites to steal...

Harvard University is warning of a targeted phishing campaign where attackers impersonate IT staff via phone calls and fake websites to steal...

Hackers are abusing the Ethereum blockchain to hide and control a new Node.js backdoor called EtherRAT, using a stealthy technique known as...

Hackers are abusing the Ethereum blockchain to hide and control a new Node.js backdoor called EtherRAT, using a stealthy technique known as...

CrystalX RAT is a real threat that also trolls a target once installed on their device. Cybersecurity researchers have discovered a brand new malware...

CrystalX RAT is a real threat that also trolls a target once installed on their device. Cybersecurity researchers have discovered a brand new malware...