Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.
A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.
Microsoft-attested driver disables 145 security processes and steals passwords, crypto wallets, and browser data.
MSNightmare released BigDiskBuster, an open-source PoC that can prevent Microsoft Defender from completing security updates.
September 17 technical disclosure explaining how a removed npm package waited for normal application calls before activating, ...