The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...
Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...
July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...
SVG phishing email attacks are bypassing enterprise email security gateways by hiding JavaScript inside image files and ...
Weedhack malware targets Minecraft players via YouTube and SEO poisoning since Jan 2026, enabling credential theft and remote ...
Researchers at Cyera found six vulnerabilities in prtobuf.js, including a flaw that can turn attacker-controlled schema data ...
Nineteen-year-old ethical hacker Nisarga Adhikary, who recently highlighted security vulnerabilities in CBSE's digital ...
The comments on some Steam Profiles are actually loaded with invisible malware.
A malware named IronWorm spread through 36 npm packages in the Arweave ecosystem, stealing developer credentials and self ...
Attackers are increasingly abusing legitimate system utilities and widely used administrative tools to deliver malware, move through networks and avoid detection, forcing security teams to rethink ...
Nineteen-year-old ethical hacker Nisarga Adhikary, who recently highlighted security flaws in CBSE's digital infrastructure, has been appointed as an OSINT and Threat Intelligence Engineer at IIT ...
Google AI Studio lets users test Gemini models, build apps, generate media, and export code. Here’s what it does, costs, and ...