The known RAT aimed at gamers is now targeting security professionals searching GitHub for PoCs and exploit codes.

The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-concept exploits for ...

The lotusbail NPM package steals WhatsApp credentials, messages, and contacts, and provides persistent access to the victims’ accounts.

And it's especially dangerous because the code works A malicious npm package with more than 56,000 downloads masquerades as a ...

Apache Commons Text is used for processing character strings in Java apps. A critical vulnerability allows the injection of ...

Spring Boot is one of the most popular and accessible web development frameworks in the world. Find out what it’s about, with ...

A new wave of organized crime maneuvers is taking aim at Americans’ holiday shopping purchases – and their wallets. Hackers leveraging malware systems and other cybercriminal tools are infiltrating ...

As 2025 draws to a close, security professionals face a sobering realization: the traditional playbook for web security has become dangerously obsolete. AI-powered attacks, evolving injection ...

North Korea's 'Contagious Interview' campaign to target job seekers has expanded yet again, this time with a persistent npm package-poisoning game that runs like a well-oiled machine. Threat actors ...

Cybersecurity researchers have disclosed details of an npm package that attempts to influence artificial intelligence (AI)-driven security scanners. The package in question is eslint-plugin-unicorn-ts ...

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...