North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

The “free” clipboard manager you just downloaded could be doing more than just copying and pasting text. Researchers recently found a new malware called PamStealer disguised as Maccy, a popular ...

A practitioner's breakdown of the CSRF attack: how the forged request works, two documented exploits, a manual test, and the ...

If you own an Apple computer, you need to be aware of an increasingly common scam going around that could allow a bad actor ...

Maccy users are being warned about fake sites after researchers found malware using the app’s name to steal Mac login ...

Opera's new Paste Protect feature blocks you from copying malicious scripts or commands. It lets you bypass blocks on certain sites you trust, too.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Attackers are abusing a Microsoft Windows tool with an intent to spy on and steal SMS messages and one-time-passwords (OTPs) from mobile devices. In an ongoing threat campaign that started in January, ...

Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious activity into legitimate enterprise traffic. Adversaries are pushing command ...

Cybersecurity researchers have disclosed a new iteration of the ongoing Contagious Interview campaign, where the North Korean threat actors have published a set of 26 malicious packages to the npm ...