A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
A macOS ClickFix campaign uses more than 250 domains and server-side fingerprinting to hide AMOS lures from crawlers and ...
TL;DR Sonatype Research Labs is tracking an active malicious package campaign, dubbed 'Flooding Dropper,' spreading on npm, ...
A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.
DPRK-linked macOS malvertising uses fake updates and ClickFix to install a backdoor that fetches a stealer targeting 157 ...
Unexplained CPU spikes, overheating fans, and battery drain may indicate cryptojacking malware is secretly mining ...
AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track ...
Black Hat USA 2026 – Las Vegas – Using email platforms to target users is nothing new in the world of threat actors. Nor is it revolutionary for defenders who've shored up guardrails when it comes to ...
AnySign4PC zero-day attack exploited mandatory South Korean banking software as a silent watering-hole weapon, letting ...
The accountants I speak to aren’t worried about AI replacing them. They’re worried about being left behind by firms that move ...
While clean financial statements and personal tax returns are important, business owners also need to understand that being ...