Malicious npm packages have been identified distributing malware that steals credentials and attempts to spread across ...

A new Kyber ransomware operation is targeting Windows systems and VMware ESXi endpoints in recent attacks, with one variant ...

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...

Two newly discovered macOS threats are designed to harvest developer credentials and cloud access as attackers focus on ...

A widely used open-source PyPI package, elementary-data, was compromised in a targeted attack that inserted infostealer malware via a GitHub Actions vulnerability. The malicious update, version 0.23.3 ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.