OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor AppsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper ChecksThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During InstallThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
CrashStealer: New macOS Infostealer Uses Signed Apps to Evade GatekeeperSecurity Affairs·Jul 14, 07:42 UTC · Jul 14, 2026Malware in the wild57
New macOS malware steals passwords by posing as Apple's crash-reporting toolHelp Net Security·Jul 14, 00:00 UTC · Jul 14, 2026Malware in the wild57
Every set of AI guardrails can be broken by the right promptHelp Net Security·Jul 9, 05:49 UTC · Jul 9, 2026AI safety & security30
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
Attackers already know the secrets are on your developers' machines. Do you?Help Net Security·Jun 4, 00:00 UTC · Jun 4, 2026Threat actor57
GitHub Internal Repositories Breached via Malicious Nx Console VS Code ExtensionThe Hacker News·May 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321CVE-2026-4802760
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential StealerThe Hacker News·May 25, 09:00 UTC · May 25, 2026Malware142
Laravel-Lang PHP Packages Compromised to Deliver CrossThe Hacker News·May 24, 08:14 UTC · May 24, 2026Malware42
GitHub Breach Traced to Malicious ‘Nx Console’ VS Code ExtensionInfosecurity Magazine·May 21, 14:45 UTC · May 21, 2026Data breachCVE-2026-48027160
GitHub, Grafana Labs breaches traced back to TanStack supply chain compromiseHelp Net Security·May 21, 00:00 UTC · May 21, 2026Vulnerability142
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chainHelp Net Security·May 19, 00:00 UTC · May 19, 2026Malware42
PureLogs infostealer is stealing credentials worldwideHelp Net Security·May 19, 00:00 UTC · May 19, 2026Malware30
Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four MinutesThe Hacker News·Mar 11, 16:38 UTC · Mar 11, 2026Phishing & fraud30
Starkiller Phishing Suite Uses AitM Reverse Proxy to Bypass MultiThe Hacker News·Mar 3, 11:10 UTC · Mar 3, 2026Phishing & fraud30
AI went from assistant to autonomous actor and security never caught upHelp Net Security·Mar 3, 00:00 UTC · Mar 3, 2026Vulnerability42
Self-spreading npm malware targets developers in new supply chain attackHelp Net Security·Feb 24, 00:00 UTC · Feb 24, 2026Malware42
AWS coding agents gain new plugin support across development toolsHelp Net Security·Feb 18, 00:00 UTC · Feb 18, 2026AI research30
Microsoft tightens Windows security with app transparency and user consentHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2026Industry155
For blind people, staying safe online means working around the tools designed to helpHelp Net Security·Jan 7, 10:53 UTC · Jan 7, 2026Industry30
Employees keep finding new ways around company access controlsHelp Net Security·Jan 7, 10:52 UTC · Jan 7, 2026Vulnerability30
Why Does Have I Been Pwned Contain "Fake" Email Addresses?Troy Hunt·Dec 3, 23:44 UTC · Dec 3, 2025Data breach45
Gartner: 40% of Firms to Be Hit By Shadow AI Security IncidentsInfosecurity Magazine·Nov 20, 10:15 UTC · Nov 20, 2025Policy & legal30
Week in review: Cisco fixes critical UCCX flaws, November 2025 Patch Tuesday forecastHelp Net Security·Nov 9, 00:00 UTC · Nov 9, 2025Vulnerability in the wildCVE-2025-48703CVE-2025-11371CVE-2025-20358+1 CVEs60
Week in review: WSUS vulnerability exploited to drop Skuld infostealer, PoC for BIND 9 DNS flaw publishedHelp Net Security·Nov 2, 00:00 UTC · Nov 2, 2025Exploit / PoCCVE-2025-2783CVE-2025-40778CVE-2025-59287+1 CVEs160
BlueNoroff's latest campaigns: GhostCall and GhostHireKaspersky Securelist·Oct 28, 03:00 UTC · Oct 28, 2025Threat actor45
IRISSCON 2025 to address the human impact on cybersecurityHelp Net Security·Oct 28, 00:00 UTC · Oct 28, 2025Data breach57
Life, death, and online identity: What happens to your online accounts after death?Help Net Security·Oct 22, 00:00 UTC · Oct 22, 2025Policy & legal30
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart ContractsThe Hacker News·Oct 17, 04:33 UTC · Oct 17, 2025Malware42
Passkeys rise, but scams still hit hard in 2025Help Net Security·Oct 3, 00:00 UTC · Oct 3, 2025Phishing & fraud30
Week in review: Cisco ASA zero-day vulnerabilities exploited, Fortra GoAnywhere instances at riskHelp Net Security·Sep 28, 00:00 UTC · Sep 28, 2025Exploit / PoCCVE-2025-10035CVE-2025-59689CVE-2025-26399+1 CVEs60