Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...
A threat actor has been exploiting CVE-2026-48558, a critical SimpleHelp vulnerability, to drop TaskWeaver and Djinn Stealer ...
A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions with more than 50,000 downloads, to monitor browser activity and plant a backdoor. The ...
Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack
The Shai‑Hulud 2.0 supply chain attack represents one of the most significant cloud-native ecosystem compromises observed recently. Attackers maliciously modified hundreds of publicly available ...
Cybersecurity researchers are calling attention to a new campaign dubbed JS#SMUGGLER that has been observed leveraging compromised websites as a distribution vector for a remote access trojan named ...
Your browser does not support the audio element. Hey there! After spending another 357 days on The Odin Project, I’ve finally hit a big milestone, I finished the ...
Secure coding refers to the practice of writing source code for software applications in a manner that actively prevents the introduction of security vulnerabilities. It is a proactive approach ...
It’s been a while since I wrote a “Vulnerabilities that (mostly) aren’t” post, but a recent discussion in our pen testing teams brought about a change in how we’re reporting LUCKY13 (and potentially ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results