A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...

Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from ...

Introduction As the world is more and more switched to the availability of the internet, web browsers act as portals to numerous services and data. However, such conveniences mean the existence of ...

Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks ...

You might be staring at your budget, wondering how you’re supposed to cover rent, debt, and everything else on $20–$25 an ...

On December 25, on-chain sleuth ZachXBT shared a post on Telegram, where he detailed unauthorized fund outflows from Trust ...

A new strain of the Shai Hulud worm is discovered by researchers, signaling the self-propagating supply chain threat ...

Hackers are targeting macOS developers with the crypto-stealing GlassWorm malware by distributing malicious extensions on the ...

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...

A Lithuanian national has been arrested for his alleged involvement in infecting 2.8 million systems with clipboard-stealing ...

The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of ...

A China-linked threat actor used malicious browser extensions over seven years to steal data and corporate intelligence from ...