The tools businesses relied on for large-scale document generation over the past two decades are starting to lose ground, and ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.

A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

VectorCertain LLC today announced new validation results demonstrating that its SecureAgent platform successfully detected ...

GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and ...

The popular game engine GameMaker continues advancing, with a new GMRT runtime that will give developers source access and ...

Coming in for a landing ...

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.