Researchers uncover malware campaigns using cracked software and compromised YouTube videos to deliver CountLoader, ...
We’ve recently seen how ChatGPT was used to trick Mac users into installing MacStealer, and now a different tactic ...
China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.
The cloud giant has stopped more than 1,800 suspected scammers from the Democratic People's Republic of Korea (DPRK, aka ...
A cute-looking AI is quietly reshaping cybercrime. See how KawaiiGPT enables phishing and ransomware for anyone, and why ...
A coordinated cyber campaign using artificial intelligence to disguise malicious code is targeting researchers, developers and security professionals by exploiting trust in GitHub repositories, ...
A new attempt to influence AI-driven security scanners has been identified in a malicious npm package. The package, eslint-plugin-unicorn-ts-2 version 1.2.1, appeared to be a TypeScript variant of the ...
The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell ...
A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...
The known RAT aimed at gamers is now targeting security professionals searching GitHub for PoCs and exploit codes.