The known RAT aimed at gamers is now targeting security professionals searching GitHub for PoCs and exploit codes.

The lotusbail NPM package steals WhatsApp credentials, messages, and contacts, and provides persistent access to the victims’ accounts.

And it's especially dangerous because the code works A malicious npm package with more than 56,000 downloads masquerades as a ...

A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56 ...

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal ...

An ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines ...

Apache Commons Text is used for processing character strings in Java apps. A critical vulnerability allows the injection of ...