…According to the report, the attacker added a post-install script to invoke npm and retrieve the malicious package. "The modified packages add a post-install script that invokes npm and installs…
OptinMonster WordPress plugin hacked in CDN supply-chain attack By Bill Toulas June 15, 2026 01:37 PM WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack…
Hackers breached a small Polish energy plant via private APN last year By Bill Toulas August 10, 2026 07:07 PM Hackers used a dedicated mobile gateway to compromise a second facility…
SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly released…
…New stealthy Quasar Linux malware targets software developers New GopherWhisper APT group abuses Outlook, Slack, Discord for comms JDownloader site hacked to replace installers with Python RAT malware Fake Claude AI website…
Critical Everest Forms Pro flaw exploited to take over WordPress sites By Bill Toulas June 6, 2026 10:09 AM Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the…
…Customers can select from a set of permissions the APK requests upon installation, and define what actions the app should take (e.g., disable Google Play, hide its icon to make it…
Chinese hackers hijack auth flow, spy on isolated network for a decade By Bill Toulas June 13, 2026 10:06 AM Chinese hackers took control of a target organization's authentication stack…
…New IronWorm malware hits 36 packages in npm supply-chain attack Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers AsyncAPI npm packages infected with credential-stealing malware Hackers…
…Critical Langflow RCE flaw exploited to hack AI app servers Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit Critical wp2shell WordPress flaws exploited to install webshells SonicWall SMA1000 flaws exploited as zero…