The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users ...

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.

Google report: AI is accelerating cloud cyberattacks, and one weak link stands out ...

In the era of A.I. agents, many Silicon Valley programmers are now barely programming. Instead, what they’re doing is deeply, ...

The United States Cybersecurity & Infrastructure Security Agency has added a vulnerability in the popular Wing FTP Server ...

This assumption breaks down because HTTP RFC flexibility allows different servers to interpret the same header field in fundamentally different ways, creating exploitable gaps that attackers are ...

GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a ...

This week, Russian hackers targeted Signal and WhatsApp users, permit-fee phishing hit U.S. applicants, ClickFix on WordPress ...