A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

ESET researchers identified new data-wiping malware that ESET named DynoWiper, used against an energy company in Poland.The TTPs observed during the DynoWiper incident closely resemble those seen prev ...

Cisco Talos links China-based UAT-8099 to IIS server attacks using BadIIS malware for regional SEO fraud, targeting Thailand ...

The WinRAR vulnerability tracked as CVE-2025-8088 was discovered and patched in July 2025, but the popular file archiver continues to suffer from its fallout. According to ...

COPENHAGEN, DENMARK, January 15, 2026 / EINPresswire.com / — Heimdal today announced that its Next-Gen Antivirus (NGAV) with ...

Since 2023, multiple security investigations have highlighted a growing trend in which China-linked threat actors ...

CastleLoader is a malicious loader designed to deliver and install additional malware, acting as the entry point for larger cyberattacks. Active since early 2025, it has gained traction due to its ...

A prolific initial access broker tracked as TA584 has been observed using the Tsundere Bot alongside XWorm remote access ...

Abstract: The advancement of information technology has introduced new challenges in cybersecurity, especially related to the Android platform which is the main target of malicious software (malware) ...

According to the firm’s latest supply chain security report, there was a 73% increase in detections of malicious open-source packages in 2025. The past year also saw a huge jump in the scope of ...

Vulnerabilities in the NPM, PNPM, VLT, and Bun package managers could lead to protection bypasses and arbitrary code ...

Experts details PeckBirdy, a JavaScript C2 framework used since 2023 by China-aligned attackers to spread malware via fake ...