The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...

A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...

A new strain of the Shai Hulud worm is discovered by researchers, signaling the self-propagating supply chain threat ...

Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain ...

A malicious npm WhatsApp library with 56,000 downloads secretly stole messages, credentials, and contacts in a sophisticated ...

Blind Eagle launches new multi-stage malware attacks via spear-phishing to compromise systems and deploy memory-resident ...

Russian hackers are circulating a new malware-as-a-service infostealer with potential anti-virus bypass capabilities.

Darktrace threat researchers have identified and analyzed a new variant of BeaverTail, a malware family associated with North Korea’s Lazarus Group activity. BeaverTail is a JavaScript-based ...

HPE issues patch for maximum-severity OneView flaw. Chinese threat actor targets maximum-severity Cisco zero-day.

A newly discovered malware infected multiple Firefox browser add-ons with more than 50,000 downloads combined.

Security researchers have uncovered a troubling new malware campaign that has been hiding malicious code inside the logo ...

Microsoft says attackers have already compromised "several hundred machines across a diverse set of organizations" via the ...