A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

This is a set of tools for you to check your own site for "configuration gaps." It mechanically scans your HTML, robots.txt, and sitemap.xml to identify missing GTM codes, incorrect canonical tags, ...

The WaterPlum group posed as tech recruiters to trick developers into downloading malware, stealing funds from more than ...

ClickFix lures deliver the ChainScript RAT, which uses a Polygon smart contract to locate active WebSocket ...

WordPress Click2Shell vulnerability lets attackers silently install themes on any admin’s site via a single crafted link, ...

When writing code in JavaScript, have you ever wondered whether you should use `export default` or avoid it (named ...

Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.

Tehran said it has discovered that the United States is planning strikes on Iran - warning this will trigger retaliation.

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

The Swift Package Manager (SwiftPM), created by Apple in 2015, is a command line automation and dependency management tool.

Firefox 156 is available today with two major performance upgrades: the built-in PDF viewer opens documents up to 45% faster ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...