The NPM ecosystem has suffered another supply chain attack in which a malicious package has accumulated millions of downloads ...
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...
The research examines how building from source, enforcing provenance and applying layered security controls can significantly reduce exposure to open-source malware. What you'll discover Where malicio ...
Trellix highlighted findings from its latest Trellix SecondSight Threat Hunting Report with implications for Indian organizations. Examining five critical campaigns observed between January and June ...
A June 2026 spear-phishing campaign against a European embassy located in Asia, attributed to Bitter APT, used a compromised diplomatic mailbox from an African country, Technology For SMEs | News ...
CyberPress weekly cybersecurity newsletter and cybersecurity bulletin covering the top 50 cyber security stories from September 7–12, 2026.
A swarm of AI agents attributed by researchers to OpenAI flooded RubyGems with more than 2,000 packages in May 2026, abused RubyDoc.info’s documentation builder for remote code execution (RCE), and ...
On the heels of a record-breaking Patch Tuesday, the disgruntled security researcher known as Nightmare-Eclipse dropped yet another Windows zero-day exploit, which enables privilege escalation and ...
Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development. Proofpoint published a detailed analysis of a Chrome-and-Windows exploit kit it ...