A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into ...

A threat actor has been exploiting CVE-2026-48558, a critical SimpleHelp vulnerability, to drop TaskWeaver and Djinn Stealer ...

Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of ...

StegoAd Microsoft Edge extensions malware affected up to 2.6 million users after the company removed 119 add-ons that hid ...

The Army, Navy, and Air Force are once again requiring basic trainees to get vaccinated against influenza after the virus quickly swept through an Air Force base in Texas, sickening at least 222 ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Rachel Williams has been an editor for nearly two decades. She has spent the last five years working on small business content to help entrepreneurs start and grow their businesses. She’s well-versed ...

Zscaler uncovered “Edgecution,” a malicious Edge extension deployed via fake Outlook update sites shared in Teams phishing Attack uses ZIP archives with Python runtime to escape browser sandbox, ...