What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? A new npm supply chain attack ...

Megalodon pushed 5,718 malicious GitHub commits in 6 hours, exposing CI secrets and cloud credentials at scale.

The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

Cybercriminals use ErrTraffic tool to automate malware distribution through fake browser error messages, with attacks ...

An antivirus utility that only defends against viruses would be nearly useless. Computer viruses are just one type of threat, and not a common one at that. A proper antivirus program defends against ...

ChatGPT malware campaign LLMShare plants fake outage pages on OpenAI real domain chatgpt.com, driving victims there through Google ads. Corporate firewalls fail because the URL is genuine. Push ...

ThreatDown’s EDR team discovered a sophisticated, multi-stage attack chain during an active investigation; the first documented case of attackers abusing the Deno runtime as a malware execution ...

First, criminals infected customer service employees with malware, then they stole more than twenty certificates. The CA has reacted - has Microsoft too?

Kaspersky says Android NFC attacks rose 188% in early 2026, with malware targeting contactless payments and ATM deposits.

A malware attack on the computer systems of Chelan County forced the county to shutdown its network, computer and telephone ...