Threat actors are abusing this model to run typosquatting attacks, tricking developers into downloading the wrong solutions. As soon as Socket discovered the malware, it notified GitHub ...

"Instead of relying on traditional phishing or cracked software sites, they build convincing AI-themed platforms – often ...

OtterCookie v3 has been found to incorporate a new upload module to send files matching a predefined set of extensions to the ...

Security researchers are publishing 1,000 email addresses they claim are linked to North Korean IT worker scams that ...

A threat actor group with ties to the Democratic People’s Republic of Korea (“North Korea”) called Contagious Interview is using front companies to spread malware through fake job interviews.

A 25-year-old has admitted hacking Disney systems and leaking data under the guise of a hacktivist collective named NullBulge ...

An npm package named 'rand-user-agent' has been compromised in a supply chain attack to inject obfuscated code that activates ...

Several malicious PyPI packages were recently observed abusing Gmail to exfiltrate stolen sensitive data and communicate with ...

The bank partnered with fraud prevention company Threat Fabric to create a taxonomy the companies hope will make it easier to ...