A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...
Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and ...
Researchers discovered OpenWebUI 98 instances that lacked any authentication 45 had already been compromised, and 33 showed ...
Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.
eSpeaks’ Corey Noles talks with Rob Israch, President of Tipalti, about what it means to lead with Global-First Finance and ...
GhostClaw, a macOS infostealer, is spreading through GitHub repositories and developer tools, and it works because routine ...
Hackers are using fake Claude Code and OpenClaw downloads to spread data-stealing malware like Amatera and AMOS among developers.
ESET researchers dive deeper into the EDR killer ecosystem, disclosing how attackers abuse vulnerable drivers.
The GlassWorm malware made news when it pivoted from exclusively targeting Windows users to also targeting Mac OS users in January, and in the time since, the malware campaign has spread across at ...