The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Discover how free calling no download works, why it beats app installs, and how tools like Call2 let you connect globally without friction.

Web developers create functional, appealing websites for users to interact with. Web development is often categorized into ...

Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other sensitive data.

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. Miasma appears to be an evolution ...

Days after IBM and Red Hat announced a master security plan for open-source software, Red Hat suffers a major breach of its own. Here's what you can do about it.

A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

Fortinet says the May 2026 Ousaban campaign uses PDF lures, geofencing, and steganography to target Windows banking users.

Microsoft says it has detected new self-propagating malware that spreads through USB drives in search of cryptocurrency ...