Ghostwriter used Prometheus lures since spring 2026 to target Ukraine agencies, enabling malware delivery and data theft.

A desktop app that lets users stream any movie, TV series, or anime for free and without ads hit the top of GitHub’s global ...

Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...

Tycoon2FA has returned with new device-code phishing attacks targeting Microsoft 365 users through legitimate OAuth login ...

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack ...

Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.

Mini Shai-Hulud worm compromises 169 npm packages including TanStack Mistral AI; TeamPCP uses stolen OIDC tokens.

Abstract: Obfuscation is the technique of making code difficult to read or comprehend. Nowadays, attackers often hide their malicious code using obfuscation and use it as a tool to exploit users. In ...

Best VPN NordVPN Review Does NordVPN Work in China in 2026: Yes, Here’s How to Use It Does NordVPN work in China in May 2026? Yes, you can use NordVPN in China, and it works, but it’s not a ...

In this post, we examine how threat actors use emojis across illicit communities, how these symbols function as a form of coded language, and why understanding this form of communication is ...

SANS LDR514 in NYC, Aug 10–15: policy, risk frameworks, board communication, and strategic leadership. Your VPN is Helping Attackers Move as Fast as AI AI collapsed human response window and turned ...