GitHub has disabled automatic execution of npm lifecycle scripts following a sophisticated worm attack that exploited the package manager’s pre-install and post-install hooks. The attack leveraged npm’s automatic script execution to propagate malicious code across developer environments, prompting i
The Gentlemen ransomware operation has compromised 483 organizations across nine months, leveraging a sophisticated multi-pronged attack strategy combining infostealer malware, AI-powered reconnaissance, and an unprecedented 90% profit-sharing model with affiliates. This aggressive newcomer demonstr
Millenium RAT, a sophisticated remote access trojan rewritten in C++, has compromised over 62,000 devices across 160 countries in an accelerating global campaign. The malware features advanced persistence mechanisms, credential harvesting capabilities, and keylogging functionality. Attackers are dis
OPENAI EMPLOYEE DEVICES COMPROMISED Malware in poisoned TanStack npm packages hit OpenAI staff machines Internal credentials stolen in supply chain attack Severity: High Target: OpenAI employees
The Silent Ransom Group (SRG) has adopted DNS fast flux infrastructure to evade detection and takedown attempts. This technique rapidly rotates IP addresses associated with command-and-control domains, making it significantly harder for defenders to block malicious infrastructure. The shift represen
Your phone knows everything. Law enforcement knows that too. Every text, photo, and location ping becomes evidence when investigators come knocking.
Apple has removed numerous Russian applications from its App Store, prompting widespread recommendations for Russian users to switch to Android devices. The removals, affecting banking apps, social media platforms, and essential services, stem from international sanctions and compliance requirements
A sophisticated backdoor named Mistic has been discovered masquerading as legitimate Microsoft security software to evade detection and maintain persistent access to compromised systems. The malware cleverly mimics the behavior and naming conventions of Microsoft Endpoint Detection and Response (EDR
Salesforce has disabled the Klue competitive intelligence application from its AppExchange marketplace following reports of OAuth token abuse that potentially exposed sensitive customer data. The incident involved improper handling of authentication tokens, allowing unauthorized access to Salesforce
OPENAI EMPLOYEE DEVICES COMPROMISED IN ATTACK Malware-laden npm packages infected two OpenAI staff machines, stealing internal credentials. Supply chain attacks continue to threaten even the most security-conscious organizations. Audit all npm dependencies and rotate credentials immediately. Severity: High Target: JavaScript developers and enterprises