ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...

DRILLAPP JavaScript backdoor targets Ukraine in Feb 2026, abusing Edge debugging features to spy via camera, microphone, and ...

The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python ...

A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware ...

AI-generated Slopoly malware used by Hive0163 in 2026 attacks maintained access for over a week, highlighting how AI ...

Seemingly out of nowhere, the “Save image as Type” Chrome extension was marked for removal, with Google warning users ...

Hackers have a new tool called ClickFix. The new attack vector combines fake human-verification prompts with malware, trying to trick users into running Terminal commands that bypass macOS security.

How can an extension change hands with no oversight?

GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a ...

TL;DR A coding flaw in PayPal’s loan app went undetected for nearly six months, exposing sensitive customer data — not because prevention controls failed catastrophically, The post What the Recent ...