#News


77 Open VSX extensions found harvesting developer info

Aug 5, 2026 // 00:38

77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed. The […]

New XCSSET variant targets macOS devs via compromised Xcode projects

Aug 5, 2026 // 00:38

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. Xcode is the official software development […]

77 Open VSX extensions found harvesting developer info

Aug 5, 2026 // 00:37

77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environments where they were installed. The […]

New XCSSET variant targets macOS devs via compromised Xcode projects

Aug 5, 2026 // 00:36

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. Xcode is the official software development […]

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

Aug 5, 2026 // 00:28

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber […]

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Aug 4, 2026 // 18:37

Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. Infected packages include […]

Varonis Agent IBAC keeps AI agents within their intended boundaries

Aug 4, 2026 // 17:16

Yesterday, Varonis announced Agent Intent-Based Access Control (IBAC), a new capability in Varonis Atlas that lets businesses connect AI agents to their enterprise data with […]

New Pass-ta-key attacks let malware hijack Google-synced passkeys

Aug 4, 2026 // 16:57

Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager’s synced passkeys to take over accounts, bypass […]

Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

Aug 4, 2026 // 16:57

Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. The activity was previously […]

PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

Aug 4, 2026 // 00:57

The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web. The data […]

Previous 1 61 62 63 64 65 353 Next