A sophisticated Magecart Stripe attack is redefining how credit card skimming campaigns operate—by turning trusted payment … Magecart Attack Abuses Stripe as Hidden Malware ChannelRead more
Hackers Weaponize Trusted Tools to Evade Detection
Cybercriminals are increasingly abandoning traditional malware in favor of stealthier techniques, with living off the land … Hackers Weaponize Trusted Tools to Evade DetectionRead more
Malicious PyPI Package Exploits Typosquatting to Deploy Backdoor
A malicious PyPI package designed to mimic a widely used Python library has exposed thousands of … Malicious PyPI Package Exploits Typosquatting to Deploy BackdoorRead more
Massive npm Supply Chain Attack Targets Red Hat Packages
A large-scale npm supply chain attack has compromised dozens of official packages under the @redhat-cloud-services scope, … Massive npm Supply Chain Attack Targets Red Hat PackagesRead more
New SolyxImmortal Malware Steals Passwords via Discord
A newly identified SolyxImmortal malware is raising alarms among cybersecurity researchers for its stealthy ability to … New SolyxImmortal Malware Steals Passwords via DiscordRead more
Hackers Can Take Over Sites via WP Maps Flaw
A critical WP Maps Pro vulnerability is exposing thousands of WordPress websites to full compromise, as … Hackers Can Take Over Sites via WP Maps FlawRead more
Gamaredon Malware Hides in Windows While Using Cloud C2 Channels
The Russia-linked Gamaredon malware campaign has resurfaced with a more advanced toolkit, leveraging hidden Windows features … Gamaredon Malware Hides in Windows While Using Cloud C2 ChannelsRead more
Dashlane Accounts Locked After Large-Scale Brute-Force Attack
A significant Dashlane brute-force attack has led to widespread temporary account lockouts after attackers attempted to … Dashlane Accounts Locked After Large-Scale Brute-Force AttackRead more
Critical StrongDM Flaw Enables Session Hijacking Without Credentials
A newly disclosed Android zero-day vulnerability is raising alarms across the cybersecurity community after Google confirmed … Critical StrongDM Flaw Enables Session Hijacking Without CredentialsRead more
Critical Android Zero-Day Enables Silent Device Takeover
A newly disclosed Android zero-day vulnerability is raising alarms across the cybersecurity community after Google confirmed … Critical Android Zero-Day Enables Silent Device TakeoverRead more