New npm malware finds a way around install script defenses
Critical NEXT.JS Flaw Allows Remote Code Execution Via Weaponized SVG File
2 sources 3 min
ChainScript: the RAT that hides its command server inside a blockchain contract
Iran-Linked Hackers Use Fake LinkedIn Job Offers to Deploy NodeRabbit and PollCat RATs
in the wild 4 min1
Hackers Exploit Critical FortiGate Flaw to Deploy AI-Assisted PivotC2 RAT
in the wild 4 min2
Hackers Impersonate IT Support on Microsoft Teams to Take Control of Employee PCs
in the wild 5 min1
JSCeal Hides Crypto Malware in V8 Bytecode
6 min1
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
in the wild 15 min
Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware
in the wild 5 min2
Iranian Hackers Pose as Recruiters to Deliver Cross
8 min
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode
in the wild1
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
3 min1