A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other ...

Rufus is a popular tool for creating bootable USB media for installing Windows 11 or other operating systems, and its latest ...

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...

IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...

Cloudsmith Inc., a startup that helps software teams manage application components, has secured $72 million in new funding.

GitHub used as C2, new Cloudflare exfiltration domain found, linked to April 22 Checkmarx KICS compromise via Dependabot.

Chainlink’s data standard is now live on the Amazon Web Services Marketplace. This new release makes Oracle infrastructure ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

The compromised account gave the threat actor access to some customers’ environment variables. In Vercel deployments, an ...

Researchers at almost 100 institutions supported the creation of the Max Planck Institute-funded EVApeCognition Dataset – ...

How did human intelligence evolve? The release of the EVApeCognition dataset provides 18 years of standardized data on great ...