On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

A series of malicious LNK files targeting users in South Korea has been detected using a multi-stage attack chain that uses ...

The new DeepLoad malware has been distributed in ClickFix attacks to steal user credentials and install a rogue browser ...

AI-powered fileless malware is changing what it means to keep a Windows 11 PC secure. Here's what's happening and what to do.

A new service on the cybercrime market provides automated capabilities to create persistent information-stealing social ...

The massive amount of junk code that hides the malware's logic from security scans was almost certainly generated by AI, ...

Learn how to use PowerShell "for" loop to automate tasks in Windows PowerShell. Includes syntax, examples, loop comparisons ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

84% of attacks abuse legitimate tools across 700,000 incidents, expanding internal attack surfaces and evading detection ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

Hackers weaponize CAPTCHA tests to install malware that steals browser passwords and cryptocurrency wallets through fake ...