A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into ...

A threat actor has been exploiting CVE-2026-48558, a critical SimpleHelp vulnerability, to drop TaskWeaver and Djinn Stealer ...

Kaspersky reports ToddyCat’s Umbrij abuses headless Chromium and OAuth flows to extract Gmail authorization codes, enabling ...

StegoAd Microsoft Edge extensions malware affected up to 2.6 million users after the company removed 119 add-ons that hid ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Zscaler uncovered “Edgecution,” a malicious Edge extension deployed via fake Outlook update sites shared in Teams phishing Attack uses ZIP archives with Python runtime to escape browser sandbox, ...

Rachel Williams has been an editor for nearly two decades. She has spent the last five years working on small business content to help entrepreneurs start and grow their businesses. She’s well-versed ...