Security News & Blog

The campaign using nearly 300 fake GitHub repositories shows how attackers are abusing trust in open-source platforms to distribute malware at scale.The repositories impersonated legitimate software and security project…

SonicWall’s warning about SMA1000 vulnerabilities being exploited as zero-days shows once again why remote-access appliances must be treated as high-priority security assets.The flaws, tracked as CVE-2026-15409 and CVE-…

Microsoft’s mapping of year-long ShinyHunters-linked Salesforce attacks shows how SaaS compromise is increasingly about abusing trusted access rather than breaking the platform itself.The campaigns used three main paths…

The CrashStealer macOS malware shows how attackers are abusing trusted-looking system prompts to steal sensitive data from Mac users.CrashStealer pretends to be Apple’s crash-reporting tool and uses fake password prompt…

The Jscrambler npm package compromise highlights how dangerous a single malicious software release can be in the development supply chain.Attackers backdoored version 8.14.0 of the jscrambler npm package with infosteale…

The cyberattack on Japan’s largest taxi operator highlights how digital disruption can quickly affect real-world transport operations.Nihon Kotsu disclosed that unauthorized access led to a malware infection, forcing th…

The Lidl online shop breach highlights how third-party service providers can become the weak link in customer-data protection.Lidl disclosed that attackers accessed customer data through an external IT service provider …

The actively exploited iCagenda and Balbooa Forms vulnerabilities show how dangerous CMS extension flaws can become when they allow unauthenticated file uploads.Both vulnerabilities affect Joomla extensions and have bee…

The exposed phishing infrastructure shows how even attackers make basic security mistakes, and how much those mistakes can reveal about active campaigns.Researchers found that a misconfigured Python HTTP server left run…

The latest RedHook Android malware variant shows how attackers are abusing legitimate developer features to gain deeper control over mobile devices.RedHook now uses Android Wireless Debugging, also known as wireless ADB…

Australia’s warning about a global campaign targeting vulnerable CMS platforms highlights how attackers continue to exploit neglected websites at scale.The campaign is targeting known vulnerabilities in content manageme…

The compromised Jscrambler npm release shows how quickly a trusted software package can become a malware delivery channel.The affected jscrambler 8.14.0 release included a malicious preinstall hook that executed during …