A malicious Tensorlake npm release carries a Shai-Hulud worm variant that steals developer secrets and spreads through ...

A malicious release of the Tensorlake npm package has been published with a Shai-Hulud worm variant that can steal developer secrets and attempt to spread through connected software supply chains. The ...

GreyNoise has identified a rise in scanning and remote code execution attempts targeting video surveillance devices in Ukraine between September 21 and October 1, 2026.

Cryptocurrency exchange Bitget has begun restoring withdrawals after attackers exploited its backend wallet infrastructure on September 24, stealing approximately $387.5 million from hot and warm ...

Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture ...

Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The ...

DarkSword operators use Coruna malware to steal iPhone crypto wallet recovery phrases, with exposed servers revealing theft ...

Security researchers have disclosed a critical Sungrow inverter vulnerability that could have allowed attackers to log in to the company’s iSolarCloud management platform without a valid password.

Hackers are targeting hotels with fake guest complaints and negative reviews that lead staff to malware disguised as ...

Public PoC released for CVE-2026-102489, a critical Zammad flaw enabling unauthenticated session cookie theft and potential code execution.

Hackers use public blockchains as C2 channels for supply chain malware, evading domain blocks and stealing cloud credentials.