Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...
This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...
One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...
Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
Maximize development velocity and eliminate operations toil with this indie-favorite serverless, event-driven, no-ops stack.
A fake GitHub repository campaign created hundreds of malicious projects that impersonated legitimate software and cybersecurity tools. The repositories directed users to deceptive download pages that ...
A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...
An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...
According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
AI agents such as OpenClaw are turning developer workstations into always-on edge servers. We test whether the Dell Pro Max ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results