A newly discovered attack sandbags Apple users into hacking themselves. Here’s what all Mac users need to know.

A newly discovered attack sandbags Apple users into hacking themselves. Here’s what all Mac users need to know.

A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.

Learn how to detect compromise, assess your exposure to the LiteLLM supply chain attack, and use GitGuardian to orchestrate ...

GlassWorm uses Solana and Google Calendar dead drops to deliver RAT stealing browser data and crypto wallets, impacting ...

Files on a central cloud server used by the ransomware group highlight a systematic, aggressive attack on network backups as ...

The suspected India-linked threat group targets governments and critical infrastructure using spear-phishing, old flaws, and ...

Venom Stealer is a new malware-as-a-service tool using ClickFix scams to steal credentials, hijack sessions and automate ...

A newly documented BlankGrabber infection chain is using a bogus “certificate” loader to disguise a multi-stage Windows compromise, adding another layer of deception to a commodity stealer already ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

We ventured into dangerous waters for some underwater metal detecting, but what we didn’t expect was to be surrounded by crocodiles and a massive python. This video takes you into the wild, where we ...

Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...