Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...

VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.

Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...

UNC6692 relies on email bombing and social engineering to infect victims with Snow malware: Snowbelt, Snowglaze, and ...

A judge in Russia has ruled that a man “committed propaganda of non-traditional sexual preferences” for posting a favorable ...

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

Mythos’s ability to autonomously exploit flaws challenges the notion of ‘secure by default’.

If a website tells you to manually install a “Windows update” from a big blue download button, close that tab immediately. Malwarebytes has just spotted a fake Microsoft support website ...

Despite claims that companies use data to provide ‘personalized pricing,’ we cannot allow this practice to become normal ...

More than $7 million of funds for specialty license plates have been funneled to groups notorious for their anti-LGBTQ+ ...