Security News & Blog

Counterfeit Open VSX Extensions Harvest Developer and CI/CD Environment InformationThe discovery of 77 counterfeit extensions on the Open VSX marketplace demonstrates how attackers can exploit developer trust without im…

New XCSSET Variant Turns Compromised Xcode Projects into a macOS Supply-Chain AttackThe emergence of XCSSET version 40 demonstrates how attackers are increasingly targeting software developers and the trusted developmen…

CISA Adds Actively Exploited N-able, Apache Tomcat and Langflow Vulnerabilities to KEV CatalogThe addition of three vulnerabilities affecting N-able N-central, Apache Tomcat and IBM Langflow to CISA’s Known Exploited Vu…

Greatness Phishing Service Exploits RingCentral Trust to Compromise Microsoft 365 AccountsA phishing campaign impersonating RingCentral demonstrates how attackers can turn an organization’s trusted-vendor configurations…

Fake Adobe and Zoom Updates Show How Attackers Abuse Trusted Software to Establish Persistent Remote AccessA series of phishing campaigns using fake Adobe Reader, Zoom, Microsoft Teams and Google Meet updates demonstrat…

Keyv-Linked npm Worm Demonstrates How Developer Credentials Can Turn One Compromise into a Software Supply-Chain EpidemicThe discovery of a self-propagating npm worm linked initially to the popular Keyv package demonstr…

DOUBLECUP ClickFix Service Shows How Browser Caches Are Being Turned into Malware Delivery ChannelsThe newly identified DOUBLECUP loader-as-a-service demonstrates how cybercriminals are making ClickFix attacks more scal…

Critical cPanel Flaw Could Allow Hosting Customers to Execute SQL with Database Root PrivilegesA newly disclosed critical vulnerability in cPanel and WebHost Manager demonstrates the significant risks created when hosti…

Malicious npm Packages Target Alibaba Developers with a Cross-Platform Remote-Access TrojanThe discovery of 18 malicious npm packages targeting users of Alibaba developer tools demonstrates how software supply-chain att…

Everside Health Data Breach Highlights the Risks of Healthcare Information Stored with Third-Party VendorsThe data breach affecting Everside Health demonstrates how an organization’s cybersecurity exposure extends beyon…

INC Ransomware Exploitation of SonicWall SMA 1000 Flaws Shows Why VPN Appliances Must Be Treated as Critical Security InfrastructureThe emergence of INC Ransomware as the dominant threat actor exploiting vulnerabilities…

ExfilSquad Leak of UK Police Personnel Data Creates Serious Phishing and Officer-Safety RisksThe reported publication of information linked to more than 100,000 UK police officers and staff demonstrates how a data breac…