…29 AM Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. The attacker hijacked valid OpenID Connect…
…Many of the infected packages are popular bioinformatics tools such as Dynamo, Spateo, CoolBox, U-FISH, and Napari-UFISH. The new campaign was discovered by application security company Socket and extended to…
…Popular node-ipc npm package compromised to steal credentials GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware…
…Security engineer Adnan Khan said that the June 5th incident affecting Microsoft repositories appeared to be part of the Miasma malware campaign that infected 32 of Red Hat's npm packages . In…
…a fake Apple security update message referencing XProtectRemediator, downloads a shell script using ‘curl,’ and executes it silently via ‘zsh.’ Before deploying its data-theft logic, the malware performs a system check…
…REMUS, however, repeatedly emphasized cookie collection, token handling, browser sessions, proxy-assisted restoration, and authenticated access continuity. From the earliest stages of the campaign, the malware promoted browser sessions and authentication artifacts…
…The operation was linked to numerous malware and ransomware campaigns involving Oyster, Lumma Stealer, Vidar, as well as the Rhysida, Akira, INC, Qilin, and BlackByte ransomware operations. Microsoft says threat actors, including…
…XLab has observed multiple payloads being used in these attacks, including DLL loaders, JavaScript droppers, and an Electron-based malware sample named UtilifySetup.exe. Mitigating the risk The most important course of…
WhatsApp says it disrupted new NSO spyware phishing attacks By Bill Toulas June 8, 2026 02:40 PM WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group…
…Additionally, the malware includes self-spreading worm modules for WhatsApp and Outlook that automatically infect new victims. The new banking trojan was discovered by Elastic Security Labs , whose researchers believe it’s…
