Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain ...

The malicious fork, named ‘lotusbail’ has all the same functionality as the legitimate project, but it also steals WhatsApp authentication tokens and session keys. Furthermore, it intercepts and ...

North Korea's 'Contagious Interview' campaign to target job seekers has expanded yet again, this time with a persistent npm package-poisoning game that runs like a well-oiled machine. Threat actors ...

If you are one of the 1.2 billion registered users of the LinkedIn professional social network platform, pay attention to ...

It is exciting to see Ignite UI open-sourcing their Angular components. By making these enterprise-grade tools accessible to the broader community, Infragistics is lowering the ...

A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.

A new variant of the BeaverTail malware linked to North Korean hackers has been identified targeting cryptocurrency traders ...

Darktrace threat researchers have identified and analyzed a new variant of BeaverTail, a malware family associated with North Korea’s Lazarus Group activity. BeaverTail is a JavaScript-based ...

Learn why modern SaaS platforms are adopting passwordless authentication to improve security, user experience, and reduce breach risks.

A malicious npm WhatsApp library with 56,000 downloads secretly stole messages, credentials, and contacts in a sophisticated ...