China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage campaign that recently switched to more sophisticated attack methods.

Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in ...

TamperedChef spreads through fake installers and SEO abuse, delivering a persistent JavaScript backdoor across multiple ...

With its new browser-in-the-browser capability, the tool helps threat actors fool employees into giving up credentials.

Security researchers at Push Security are warning that Sneaky2FA, an advanced phishing-as-a-service (PhaaS) kit, has released ...

APT24 and Autumn Dragon launch multi-year espionage campaigns using BADAUDIO, supply chain attacks, and new CVE-2025-8088 ...

You may have noticed that large pieces of the Internet were down on Tuesday. It was a problem at Cloudflare, and for once, it ...

Threat actors are weaponizing trusted software certificates to deliver stealthy malware and compromise enterprise networks through fraudulent, signed applications, ...