Your blog category
Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks targeting financial and cryptocurrency organizations.… Read More »Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms
A new coordinated cross-ecosystem software supply chain attack campaign has targeted npm, PyPI, and Crates.io to distribute credential-stealing malware. The campaign, codenamed TrapDoor, spans more than 34 malicious packages across… Read More »TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
A new “coordinated” supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. “Although the… Read More »Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages… Read More »npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most “systemically” important software across the world since the… Read More »Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework. The affected packages include… Read More »Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of… Read More »Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild. The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of… Read More »LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data… Read More »First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups
The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151Ukraine’s National Security and Defense Council) has been observed using lures related to Prometheus, a Ukrainian online learning platform, to… Read More »Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware