A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...
AI coding agents are highly vulnerable to zero-click attacks hidden in simple prompts on websites and repositories, a ...
The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of ...
A new version of the MacSync Stealer malware has been found masquerading as a legitimate, notarized app. It bypasses standard macOS security warnings to harvest credentials and crypto wallets.
The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-concept exploits for ...
The MacSync Stealer has transitioned from a ClickFix variant to a more sophisticated code-signed malware capable of bypassing traditional macOS ...
New SantaStealer malware reportedly threatens holiday shoppers with password theft. This Christmas-themed info-stealer ...
A new campaign named GhostPoster has leveraged logo files associated with 17 Mozilla Firefox browser add-ons to embed malicious JavaScript code designed to hijack affiliate links, inject tracking code ...
One Battle After Another has been hailed as one of the best movies of the year, generating Oscar buzz in every major category. But if you’re hoping to watch the film at home, it’s best to steer clear ...
A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...
We are either at the dawn of AI-driven malware that rewrites itself on the fly, or we are seeing vendors and threat actors exaggerate its capabilities. Recent Google and MIT Sloan reports reignited ...