The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that evade standard code review.

IBM researchers discovered an autonomously coded backdoor that they called unsophisticated but nonetheless ominous.

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

Android 17 blocks non-accessibility apps from the Accessibility API in Advanced Protection Mode, reducing malware abuse and the attack surface.

China-linked CL-STA-1087 targets Southeast Asian militaries since 2020 using AppleChris and MemFun for espionage and credential theft.

The investigation is being led by the FBI’s Seattle Division, which recently launched an online portal asking potential victims to report if they installed certain Steam games that contained malicious ...

Cybercriminals really like to use AI, but not for the stuff you think. It’s more about brute forcing things into replications.

A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware ...

Criminals have secretly hijacked more than 14,000 devices worldwide in order to carry out attacks that are almost impossible ...

Cyber fraudsters are using new tech to bypass UPI security, says CloudSEK report. Digital Lutera toolkit enables account ...

NPCI has responded to a CloudSEK report commenting on how fraudsters bypass security protections in UPI apps. Here's all you ...

CloudSEK has warned of a new cyber fraud technique that manipulates Android devices, intercepts OTPs and bypasses UPI security; UPI custodian NPCI says robust safeguards exist to manage such risks ...