#news


North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

Jul 3, 2026 // 19:16

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to […]

Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

Jul 3, 2026 // 18:59

A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, […]

European Parliament Member Investigating Spyware Was Hacked With Pegasus

Jul 3, 2026 // 14:06

A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with […]

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Jul 3, 2026 // 11:27

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. […]

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Jul 2, 2026 // 22:26

Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. “Although tactics differ […]

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

Jul 2, 2026 // 22:26

Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people’s traffic. Working with the FBI, […]

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

Jul 2, 2026 // 18:26

This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. […]

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

Jul 2, 2026 // 17:17

It can start with something as mundane as dragging a link into your browser. Three seconds later, a threat actor has the tokens needed to […]

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

Jul 2, 2026 // 16:06

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email […]

Alleged Scattered Spider hacker extradited to the United States

Jul 2, 2026 // 15:37

A dual United States and Estonian citizen has been extradited to the U.S. to face charges alleging he was a member of the Scattered Spider […]

Previous 1 … 237 238 239 240 241 … 388 Next