Dustin Kirkland of Chainguard explains how verified, hardened components and AI-powered automation can prevent malware ...
In essence, MalTerminal is a malware generator. When adversaries bring it up, it asks if they want to create a ransomware ...
Zscaler reveals SilentSync remote access trojan hidden in two malicious PyPI Python packages, risking browser data theft and multi-OS compromise.
FileFix phishing attack in June 2025 delivers StealC malware via Bitbucket images, bypassing detection with obfuscation.
New DDoS botnet ShadowV2 targets misconfigured Docker containers and offers a service model where customers launch their own ...
North Korean hackers are intensifying their global campaign against cryptocurrency and Web3 developers, using a new backdoor ...
The Python Package Index (PyPI), run by the Python Software Foundation, has officially invalidated all the publishing tokens that were stolen in the GhostAction supply chain attack that happened ...
Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal ...
The campaign detailed in the report, dubbed “ShadowV2,” is a Python-based command-and-control framework hosted on GitHub ...
Binance founder CZ Zhao issued urgent warnings about North Korean hackers infiltrating crypto companies through fake job ...
A sneaky malware campaign slithers through Cloudflare tunnel subdomains to execute in-memory malicious code and give unknown attackers long-term access to pwned machines.… Securonix threat hunters ...