Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest ...
Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading ...
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.
A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate ...
The United Kingdom's National Cyber Security Centre (NCSC-UK) and international partners warned that China-nexus hackers are ...
Password resets are one of the easiest ways for attackers to bypass security controls. Specops Software shows how helpdesk ...
Microsoft confirmed that a recent Microsoft Edge browser update introduced a bug that prevents Windows users from joining ...
CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has ...
Recently observed Trigona ransomware attacks are using a custom, command-line tool to steal data from compromised ...
Dutch cosmetics giant Rituals disclosed a data breach after attackers stole the personal information of an undisclosed number ...
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.