Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs ...

Macworld Jamf Threat Labs has issued a report on new malware that users of the third-party clipboard manager Maccy need to be aware of. The malware, dubbed “PamStealer,” is distributed by malicious ...

Stolen and leaked credentials lead to Node.js packages from AsyncAPI and Jscrambler Code Integrity being poisoned with ...

The FOSS well apparently never runs dry—here’s the next round of this roundup.

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import time — not install time — evading npm v12’s script-blocking defaults and ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Vimeo’s native Framer component has responsiveness limitations in full-bleed contexts. Works via Embed component with direct ...

The FBI has issued a stark warning about a sophisticated cyber threat using fake websites and login pages to steal your money and data. Cybercriminals are employing advanced systems to secretly ...

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...