A widely active phishing-as-a-service (PhaaS) operation known as FlowerStorm has begun using a browser-based virtual machine to conceal credential theft code, marking what researchers say is an ...
Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm packages.
Tycoon2FA has returned with new device-code phishing attacks targeting Microsoft 365 users through legitimate OAuth login ...
Ghostwriter used Prometheus lures since spring 2026 to target Ukraine agencies, enabling malware delivery and data theft.
A desktop app that lets users stream any movie, TV series, or anime for free and without ads hit the top of GitHub’s global ...
The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.
A legacy Windows scripting utility tied to Internet Explorer is still being used in modern malware campaigns, researchers say ...
Socket raises $60M to expand AI-driven software supply chain security and protect developers from cyber threats worldwide.
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...
Abstract: Physical-layer key generation has emerged as a promising avenue for establishing secret keys using reciprocal channel measurements between wireless devices. However, channel reciprocity may ...
Abstract: With the rapid proliferation of increasingly sophisticated malware, there is a critical need for robust and efficient detection methods capable of identifying both obfuscated and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results