Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...

Cybersecurity, Cyber Espionage, Malware, PlugX, Data Breach, Vulnerability, Phishing, European Union, Threat Intelligence ...

Out of Box Experience update for Windows 11, version 24H2 and 25H2, and Windows Server 2025: October 28, 2025 This update ...

Hackers have turned the RedTiger toolkit into a data-stealing weapon. This post breaks down the threat and the steps to keep your PC safe.

Attackers are using the open-source red-team tool RedTiger to build an infostealer that collects Discord account data and ...

The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...

Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...

The new Start has a more convenient layout that saves you a click Four years after the debut of Windows 11, Microsoft has finally fixed one of the biggest problems with its Start menu: The need to ...

An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...

A wave of advanced phishing campaigns is exploiting a novel combination of social engineering and browser-cache manipulation ...