A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...
Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers ...
Ghostwriter used Prometheus lures since spring 2026 to target Ukraine agencies, enabling malware delivery and data theft.
A 10-month Android malware campaign has used nearly 250 fake apps to sign victims up to premium services on their mobile ...
Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.
On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow ...
The disguised apps use WebView automation, JavaScript injection, and OTP interception to avoid detection and complete fraudulent subscriptions.
Every time a professional opens LinkedIn in a Chrome-based browser today, hidden JavaScript silently probes their device for ...
The security platform Socket has recently discovered an enormous worldwide malware operation that has been dubbed "TrapDoor".
A teen cybersecurity researcher's blog post alleging serious flaws in CBSE's On-Screen Marking portal has triggered concern ...
The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...
Attackers performed an email takeover attack on a dormant maintainer account and published new node-ipc versions containing ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results