libraries

April 10, 2026

EngageSDK Vulnerability puts millions of crypto wallets at risk

A recently identified flaw in the popular Android library EngageSDK has sparked serious worries within the cryptocurrency sector, potentially endangering…
Read More »
April 9, 2026

Fake Security Tool Spreads LucidRook in Taiwan Cyberattacks

Hackers are using fake security tools and cleverly crafted phishing emails to secretly deploy a new malware family, LucidRook, against…
Read More »
April 9, 2026

Critical Chrome Flaws Let Attackers Execute Arbitrary Code

Google has released an urgent security update for its Chrome browser, resolving multiple dangerous vulnerabilities. The Chrome team promoted version…
Read More »
April 7, 2026

Threat Actors Exploit LogMeIn Resolve, ScreenConnect in Phishing Campaigns

Cybercriminals are exploiting legitimate remote monitoring and management (RMM) tools LogMeIn Resolve and ScreenConnect in a multi-stage phishing operation that…
Read More »
April 2, 2026

NoVoice on Google Play Exploits 22 Flaws to Hit Millions of Android Users

A sophisticated Android rootkit campaign named Operation NoVoice infiltrated over 50 applications on Google Play, exploiting 22 known vulnerabilities to…
Read More »
March 30, 2026

Stealthy .NET Malware Adds AV Killer, HVNC Features

CrySome RAT is a newly observed, advanced .NET remote access trojan that combines full-featured post‑exploitation tooling with unusually hardened persistence,…
Read More »
March 27, 2026

Phishing ZIP Files Used to Deploy PXA Stealer Targeting Financial Firms

A significant surge in PXA Stealer campaigns targeting global financial institutions during Q1 2026. This marks a notable shift in…
Read More »
March 27, 2026

Red Hat Warns of Malware Embedded in Popular Linux Tool, Opening Doors for Unauthorized Access

Red Hat has issued an urgent security alert concerning a highly sophisticated supply chain attack that compromised recent versions of…
Read More »
March 27, 2026

Hackers Target South Asian Financial Firm with BRUSHWORM and BRUSHLOGGER Attacks

A South Asian financial institution faced compromise due to a custom malware toolkit combining a modular backdoor (BRUSHWORM) and a…
Read More »
March 25, 2026

China-Backed Hackers Target Southeast Asian Military Systems in Ongoing Spy Campaign

China-linked threat actors have been identified targeting Southeast Asian military networks in a long-running cyber espionage campaign focused on intelligence…
Read More »
March 25, 2026

Five Malicious npm Packages Target Crypto Developers, Steal Wallet Keys via Telegram

Five malicious npm packages impersonating popular crypto libraries are stealing wallet keys from Solana and Ethereum developers and exfiltrating them…
Read More »
March 19, 2026

Pyronut Package Backdoors Telegram Bots With RCE

Malicious ‘Pyronut’ is a trojanized Python package that backdoors Telegram bots and userbots, giving attackers remote code execution over both…
Read More »
March 18, 2026

Apple WebKit Security Flaw Exposes iOS and macOS Users to Content-Based Bypass Attacks

Apple released emergency security patches to address a critical WebKit flaw currently exposing iPhone, iPad, and Mac users to sophisticated…
Read More »
March 9, 2026

Nginx UI Vulnerabilities Let Attackers Download Full System Backups

A critical security flaw has been identified in Nginx UI that permits unauthorized threat actors to download and decrypt entire…
Read More »
December 23, 2025

Docker Releases Free, Production-Grade Hardened Container Images

In a significant move to enhance software supply chain security, Docker has made its production-grade hardened container images available as…
Read More »
December 16, 2025

SantaStealer Malware Steals Sensitive Files, Credentials, and Crypto Wallet Data

Cybersecurity researchers at Rapid7 Labs have discovered a new and sophisticated threat: SantaStealer, a malware-as-a-service information stealer that is being…
Read More »
December 14, 2025

Hackers Launch Rust-Based Luca Stealer Targeting Linux and Windows

Cybercriminals are shifting away from traditional programming languages like C and C++ and towards modern alternatives such as Rust, Golang,…
Read More »
December 11, 2025

19 Fake PNG Extensions Found in VS Code Marketplace

Researchers at ReversingLabs (RL) have uncovered a sophisticated supply chain campaign that involves 19 malicious Visual Studio Code (VS Code)…
Read More »
December 6, 2025

Malicious Go Packages Impersonate Google’s UUID Library to Steal Sensitive Data

A hidden danger has been lurking in the Go programming ecosystem for over four years. Security researchers from the Socket…
Read More »
November 24, 2025

Zapier’s NPM Account Hacked, Multiple Packages Infected with Malware

Zapier’s NPM account has been successfully compromised, leading to the injection of the Shai Hulud malware into 425 packages currently…
Read More »

Previous page Next page