GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.

A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...

UNC6692 relies on email bombing and social engineering to infect victims with Snow malware: Snowbelt, Snowglaze, and ...

GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

The least exciting page in your browser is also the easiest one to vibe-code.

The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

Three LLMs, one prompt, and a lot of disappointment.

I have to apologize that my posting have been a little slow this week. There was a few things at work to get through and if ...