Malicious npm package indexed-btree impersonated sorted-btree, using nearly 2M weekly downloads to steal data and deliver payloads.

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

Brevo supply chain breach spreads WordPress backdoors and ClickFix malware to over 100,000 websites. Discover how to protect ...

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

North Korean threat actors, tracked as WaterPlum (also known as Contagious Interview), have compromised at least 30,000 ...

The $400 million permit filing signals that the Memphis airport's terminal renovation is entering its main phase, following ...

This is a set of tools for you to check your own site for "configuration gaps." It mechanically scans your HTML, robots.txt, and sitemap.xml to identify missing GTM codes, incorrect canonical tags, ...

Thirteen npm packages deliver WeaselBiscuit, a JavaScript stealer that harvests Chrome extension storage across Windows, macOS, and Linux.

Brevo supply-chain attack injected malicious JavaScript into 100,000+ sites, targeting WordPress admins and visitors with ...

A hack at Brevo, an online marketing vendor, created a pathway to place a ClickFix-style attack across numerous websites on ...