GitHub enforces FIDO 2FA and seven-day token limits after Shai-Hulud npm attack to boost supply chain security.

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel ...

Hackers from North Korea and China are exploiting AI to forge IDs, infiltrate companies, and supercharge espionage campaigns.

Apple warns users of spyware attacks in new alerts as officials confirm rising risks for journalists, activists, and public ...

Australian Cyber Security Centre issues a high alert regarding a series of attacks on online code repositories, as experts ...

SonicWall has released a software update for its SMA 100 appliances to help users remove the Overstep malware deployed in a ...

Vane Viper, also called Omnatuor, was previously documented by the DNS threat intelligence firm in August 2022, describing it ...

Sextortion-based hacking, which hijacks a victim's webcam or blackmails them with nudes they're tricked or coerced into sharing, has long represented one of the most disturbing forms of cybercrime.

VirusTotal has discovered a phishing campaign hidden in SVG files that create convincing portals impersonating Colombia's judicial system that deliver malware. VirusTotal detected this campaign after ...

It’s a tale as old as time for PC users: you unbox your brand-new Windows laptop, excited by the promise of blazing-fast ...

The new variant of Docker-targeting malware skips cryptomining in favor of persistence, backdoors, and even blocking rivals from accessing exposed APIs. A newly discovered strain of a cryptomining ...