SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...
A newly identified threat group, UNC6692, has been caught running a sophisticated cyberattack campaign that uses Microsoft ...
The compromise of a version of Bitwarden's CLI is connected to the ongoing Checkmarx supply chain campaign, but differences in the operational methods of both incidents are making it difficult to ...
A new Kyber ransomware operation is targeting Windows systems and VMware ESXi endpoints in recent attacks, with one variant ...
A relatively new ransomware family is using a novel approach to hype the strength of the encryption used to scramble ...
VPNs, Virtual Private Networks, aren’t just a good idea to keep your data secure: for millions of people living under ...
Socket has notified the Eclipse Foundation, which oversees the Open VSX marketplace, of the latest fraudulent additions, and Burckhardt expects that by now all 73 have been deleted.
Recently observed Trigona ransomware attacks are using a custom, command-line tool to steal data from compromised ...
The Bitwarden security team confirms that a malicious version of the command-line client was briefly distributed.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results