ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-46817CVE-2023-434660
New MacOS Malware Exploits Legitimate Developer IDInfosecurity Magazine·Jul 14, 12:00 UTC · Jul 14, 2026Malware30
Malicious AI agent skills can slip past the scanners built to stop themHelp Net Security·Jul 9, 00:00 UTC · Jul 9, 2026Malware42
PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login PasswordsThe Hacker News·Jul 3, 10:17 UTC · Jul 3, 2026Malware30
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python InfostealerThe Hacker News·Jul 1, 10:25 UTC · Jul 1, 2026Malware142
ClickFix Now Cybercriminals' Favorite Malware Delivery TechniqueInfosecurity Magazine·Jun 30, 12:00 UTC · Jun 30, 2026Malware30
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More StoriesThe Hacker News·Jun 25, 12:30 UTC · Jun 25, 2026RansomwareCVE-2026-8932CVE-2026-5016060
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AIThe Hacker News·Jun 25, 09:23 UTC · Jun 25, 2026AI safety & security30
macOS Backdoor Uses Prompt Injection to Evade AI TriageInfosecurity Magazine·Jun 24, 14:00 UTC · Jun 24, 2026AI safety & security30
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, DeviceThe Hacker News·Jun 18, 15:29 UTC · Jun 18, 2026Exploit / PoCCVE-2026-2012760
North Korean Hackers Use Fake Coding Tasks to Steal CryptoInfosecurity Magazine·Jun 8, 15:00 UTC · Jun 8, 2026Malware30
JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS MalwareThe Hacker News·May 28, 12:59 UTC · May 28, 2026Malware42
New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chainHelp Net Security·May 19, 00:00 UTC · May 19, 2026Malware42
Cursor Extension Flaw Exposes Developer API KeysInfosecurity Magazine·Apr 29, 15:00 UTC · Apr 29, 2026Vulnerability42
North Korean hackers siphon more than $12 million from crypto users in sprawling campaignThe Record·Apr 22, 20:52 UTC · Apr 22, 2026Threat actor57
ClickFix campaign delivers Mac malware via fake Apple pageHelp Net Security·Apr 10, 00:00 UTC · Apr 10, 2026Malware30
Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 StepsThe Hacker News·Apr 7, 11:50 UTC · Apr 7, 2026Malware55
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool InstallersThe Hacker News·Mar 31, 11:33 UTC · Mar 31, 2026Malware42
New macOS Infinity Stealer uses Nuitka Python payload and ClickFixSecurity Affairs·Mar 30, 07:49 UTC · Mar 30, 2026Malware30
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for CrossThe Hacker News·Mar 3, 06:20 UTC · Mar 3, 2026Malware42
ThreatsDay Bulletin: Kali Linux + Claude, Chrome Crash Traps, WinRAR Flaws, LockBit & 15+ StoriesThe Hacker News·Feb 27, 07:41 UTC · Feb 27, 2026RansomwareCVE-2023-4660460
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News·Feb 23, 10:23 UTC · Feb 23, 2026Vulnerability55
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware StagingThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Malware30
North Korean Hackers Use Deepfake Video Calls to Target Crypto FirmsInfosecurity Magazine·Feb 11, 16:35 UTC · Feb 11, 2026Malware42
North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency OrganizationsThe Hacker News·Feb 11, 06:50 UTC · Feb 11, 2026Data breach57
From Ransomware to Residency: Inside the Rise of the Digital ParasiteThe Hacker News·Feb 10, 13:59 UTC · Feb 10, 2026Ransomware57
Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWormThe Hacker News·Feb 2, 15:31 UTC · Feb 2, 2026Malware42
For blind people, staying safe online means working around the tools designed to helpHelp Net Security·Jan 7, 10:53 UTC · Jan 7, 2026Industry30
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ StoriesThe Hacker News·Jan 1, 15:52 UTC · Jan 1, 2026MalwareCVE-2023-26359CVE-2023-38205CVE-2023-44353+7 CVEs47
MacOS DigitStealer malware poses as DynamicLake, targets Apple Silicon M2/M3 devicesHelp Net Security·Nov 20, 00:00 UTC · Nov 20, 2025Malware42
Exclusive: OpenAI’s Atlas browser — and others — can be tricked by manipulated web contentCyberScoop·Oct 28, 18:27 UTC · Oct 28, 2025Vulnerability42
BlueNoroff's latest campaigns: GhostCall and GhostHireKaspersky Securelist·Oct 28, 03:00 UTC · Oct 28, 2025Threat actor45
npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord ChannelsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Data breach157
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerabilityHelp Net Security·Sep 7, 00:00 UTC · Sep 7, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-24204CVE-2025-48543+2 CVEs60
macOS Stealer Campaign Uses “Cracked” App Lures to Bypass Apple SecuriInfosecurity Magazine·Sep 5, 12:30 UTC · Sep 5, 2025Malware30
VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64The Hacker News·Sep 5, 06:13 UTC · Sep 5, 2025Malware30