…According to application security company Socket, the hackers published 639 malicious versions across 323 unique packages in about one hour. Some of the impacted libraries include: echarts-for-react @antv/g2 @antv…
What 345 Days of Untested Exposure Looks Like at a Bank Sponsored by Sprocket Security June 3, 2026 10:02 AM In April, a single VPN vulnerability led to data breaches at…
…ShinyHunters has been targeting Salesforce customers for the past year and breached hundreds of companies, claiming they've stolen billions of records in the Salesforce Aura data theft attacks and the Salesloft…
…attention from security researchers and malware analysts. Several technical analyses published in recent months focused on the malware’s capabilities, infrastructure, and similarities to Lumma Stealer, including browser targeting mechanisms, and credential…
…Organizations using GlobalProtect VPN devices should immediately install the latest security updates to patch the flaws. Admins can also mitigate the flaw by turning off the authentication override feature or utilizing a…
…the EFI partition on the target drive. According to Chaotic/Nightmare Eclipse, the spawned shell gains unrestricted access to the storage volume protected by BitLocker. Independent security researcher Kevin Beaumont confirmed that…
…TeamPCP was linked to other major supply chain attacks targeting developer code platforms, including PyPI , NPM , GitHub , and Docker , and, more recently, to the "Mini Shai-Hulud" supply chain campaign (which also…
…The same outlet alleges that Danish authorities and infrastructure providers linked WorkTitans to attacks by the pro-Russian hacktivist group NoName057(16), which has previously targeted key organizations with distributed denial-of…
…It also warned staff, students, and external CareerConnect users that they might be targeted by phishing or scam emails. This is the second data breach disclosed by Oxford University this year, following…
…The findings reveal an increasingly professionalized ecosystem focused on affiliate growth, automation, phishing scalability, wallet-security bypasses, and operational resilience. The analyzed data suggests that modern drainer operations increasingly function similarly to…
