libraries

May 20, 2026

The Mini Shai-Hulud Worm and the Weaponization of Sigstore Provenance

The npm ecosystem is facing a sophisticated new evolution of the Mini Shai-Hulud malware. This latest campaign has successfully compromised…
Read More »
May 20, 2026

The Rise of Regional NFC Relay Malware: Deep Dive into DevilNFC and NFCMultiPay

Cybersecurity researchers have identified a sophisticated new evolution in mobile banking fraud: the DevilNFC malware family. This threat is distinguished…
Read More »
May 20, 2026

Beyond the Blockchain: How the Void Botnet is Rewriting the Rules of Command-and-Control Infrastructure

If you’ve been tracking the evolution of botnet architecture over the past few years, you’ve likely noticed a quiet but…
Read More »
May 19, 2026

Mini Shai-Hulud: Supply Chain Campaign Targets @antv Ecosystem

A sophisticated, large-scale supply chain attack has recently been detected targeting the npm registry, specifically compromising a wide array of…
Read More »
May 18, 2026

Supply Chain Alert: New npm Campaign Weaponizes Leaked Shai-Hulud Malware via Typosquatting

A sophisticated supply chain attack campaign has been detected targeting the JavaScript development ecosystem. Within the last 24 hours, security…
Read More »
May 14, 2026

The “Shai-Hulud” Worm: How a Massive Supply Chain Attack is Weaponizing Developer Ecosystems

In a sophisticated escalation of supply chain warfare, threat actors have successfully compromised over 170 npm packages and two PyPI…
Read More »
May 14, 2026

Seedworm’s Evolution: Inside the Iranian-Linked APT’s Surgical Global Espionage Push

The advanced persistent threat (APT) group known as Seedworm—also identified by the monikers MuddyWater, Temp Zagros, and Static Kitten—has long…
Read More »
May 12, 2026

The Worm That Ate the Workflow: Unpacking the TanStack, React Router, and Mini Shai-Hulud Infection Chain

A sophisticated supply chain compromise has recently targeted the TanStack ecosystem, affecting 84 distinct npm packages. This wasn’t a simple…
Read More »
May 7, 2026

Critical Sandbox‑Escape Vulnerabilities Discovered in the vm2 Node.js Library

Multiple critical sandbox‑escape vulnerabilities have been disclosed in vm2, one of the most widely used Node.js sandboxing libraries, allowing attackers…
Read More »
May 6, 2026

Deep Dive: Analyzing Salat Stealer—The Go-Based RAT Redefining C2 Resilience

Security researchers have uncovered a sophisticated new threat actor in the Windows ecosystem: Salat Stealer. While many modern threats fall…
Read More »
May 6, 2026

Unmasking QLNX: The Stealthy Linux RAT Targeting the Software Supply Chain

In the evolving landscape of cyber threats, the most dangerous attackers aren’t just looking for data—they are looking for influence.…
Read More »
April 30, 2026

Supply‑Chain Sabotage: The Mini Shai Hulud Campaign Targeting SAP Developers

The software supply chain remains one of the most precarious links in modern cybersecurity, and a recent discovery has highlighted…
Read More »
April 29, 2026

The “Slinky” Trap: How a Fake Minecraft Cheat Deploys LofyStealer Malware

In a sophisticated social engineering campaign targeting the gaming community, Minecraft players are being targeted by a deceptive “hacking tool”…
Read More »
April 27, 2026

Supply Chain Alert: Sophisticated Malware Campaign Exploits Namastex Labs to Bridge npm and PyPI Ecosystems

A sophisticated supply chain attack has been uncovered targeting the developer ecosystem, specifically leveraging compromised packages linked to Namastex Labs.…
Read More »
April 23, 2026

From Disclosure to Exploitation in Hours: LMDeploy SSRF Vulnerability Exploited in the Wild

In the rapidly evolving landscape of AI infrastructure, the window between vulnerability disclosure and active exploitation is shrinking to a…
Read More »
April 22, 2026

Mozilla MFSA-2026-30: Critical Memory Safety & Privilege Escalation Fixes for Firefox 150 & Thunderbird 150

Mozilla has released a comprehensive security advisory (MFSA-2026-30) addressing a significant cluster of vulnerabilities affecting various components of the Firefox…
Read More »
April 20, 2026

FUD Crypt: Malware‑as‑a‑Service Platform Hijacks Azure Trusted Signing to Produce Undetectable Windows Payloads

In the underbelly of cybercrime, a service dubbed FUD Crypt has emerged as a turnkey solution for creating stealthy Windows malware.…
Read More »
April 17, 2026

Resurgent Payouts King Ransomware Group: BlackBasta Legacy Meets Advanced Evasion Tactics

A sophisticated new ransomware operation called Payouts King is rapidly emerging, leveraging proven social-engineering tactics from the now-defunct BlackBasta collective…
Read More »
April 16, 2026

Proton VPN Impersonation Exposes NWHStealer: A Sophisticated Malware Campaign

Multiple ongoing malware campaigns are deploying the sophisticated information-stealing trojan, designated as NWHStealer, via deceptive VPN installer packages, gaming modifications,…
Read More »
April 13, 2026

Critical Axios Vulnerability Enables Full Cloud Infrastructure Compromise

A severe security flaw has been identified in Axios, one of the internet’s most popular HTTP client libraries. This vulnerability…
Read More »

Previous page Next page