The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through malicious npm releases. Security researchers from StepSecurity identified ...

The Uranium Finance indictment carries potential prison time of up to 30 years for fraud and money laundering counts.

The malware at the center of it, dubbed Omnistealer by investigators, uses public blockchains not just for payments, but as ...

An extremely popular NPM package used in many JavaScript projects has been compromised and can wreak havoc on your machine if ...

Whether it’s a new couch or a rare piece of hardware picked up on eBay, we all know what it feels like to eagerly await a delivery truck. But the CERN researchers involved in a delivery ...

Josh Simons resigned after facing claims a think tank he used to run commissioned a report into journalists' backgrounds.

Experts warn the campaign could outpace past global cyberattacks, with hundreds of thousands of credentials already ...

Fake CAPTCHA pages can install the StealC infostealer. Don't paste or run commands; disconnect and change passwords.

A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the ...

Leaked DarkSword code makes iPhones on older iOS easy targets. See who is at risk and how to protect your device right now.

Here’s what we know, and what you need to know, about Coruna and DarkSword, two advanced iPhone hacking tools discovered by ...

A government-grade iOS exploit kit called DarkSword has been leaked on GitHub, putting hundreds of millions of iPhones ...