A new phishing and malware distribution toolkit called MatrixPDF allows attackers to convert ordinary PDF files into ...

Chrome faces its sixth zero-day attack in 2025 as Google patches critical V8 engine flaw CVE-2025-10585 discovered by Threat Analysis Group.

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Researchers at security company Varonis have uncovered a crafty new Gmail phishing attack that not only masquerades as a PDF ...

Discover the types of malware in 2025, from backdoors to ransomware, and learn which families hackers use most in real-world attacks.

A coalition of open-source stewards warns that the software industry’s reliance on goodwill to maintain critical ...

Process improvements and a closer look at funding streams will provide far more protection for the open source software we ...

Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after attackers injected malware into 18 popular packages that together account for ...

Charles Guillemet, chief technology officer at hardware wallet maker Ledger, warned on X on Monday that a large-scale supply chain attack is underway after the compromise of a reputable developer’s ...

A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the ...