A new phishing and malware distribution toolkit called MatrixPDF allows attackers to convert ordinary PDF files into ...

Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal ...

The foundations said in their blog post that automated CI systems, large-scale dependency scanners, and ephemeral container builds operated by companies place “enormous strain on infrastructure” while ...

In 1989, Sir Tim revolutionized the online world. Today, in the era of misinformation, addictive algorithms, and extractive ...

In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the ...

North Korea’s Contagious Interview spreads AkdoorTea and TsunamiKit to steal crypto and infiltrate global developers.

Security experts warn of an AppSuite malware, TamperedChef, a trojanized PDF editor stealing data and deploying ransomware.

ESET researchers reveal how malware operators collaborate with covert North Korean IT workers, posing a threat to both headhunters and job seekers.

The security researchers who discovered the malicious npm package called it the “first malicious MCP in the wild” ...

It appears, however, that the developer took the legitimate code from the Postmark MCP server's GitHub repository, added the ...

A new AsyncRAT malware campaign from threat actor TA558 is targeting the South American hospitality industry, demanding the ...

A malicious npm package named Fezbox has been found using an unusual technique to conceal harmful code. The package employs a ...