Twelve npm packages hijacked via compromised maintainer accounts to exfiltrate secrets using obfuscated scripts.

DNS intelligence firm Infoblox is tracking the actor behind the PhaaS, the phishing kit, and the related activity under the ...

Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after ...

The fraudulent website mimicking India Post is named "postindia [.]site." Users who land on the site from Windows systems are ...

RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.

VMware Tools flaw CVE-2025-22230 enables high-privilege actions on Windows VMs + No workaround + Patch in 12.5.1.

An ongoing campaign that infiltrates legitimate websites with malicious JavaScript injects to promote Chinese-language ...

Traditional CASB tools miss 100% of shadow SaaS threats—browser-based security offers real-time visibility and control.

CISA adds Sitecore flaws CVE-2019-9874 and CVE-2019-9875 to KEV amid active exploitation and agency patch mandates.

SnapCenter is an enterprise-focused software that's used to manage data protection across applications, databases, virtual ...

EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware | Read more hacking news on The Hacker News ...

The Russian cybersecurity vendor, in its own bulletin, characterized the zero-day exploitation of CVE-2025-2783 as a ...