Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

Sonatype®, the leader in AI-driven DevSecOps, today unveiled the Q1 2026 Open Source Malware Index, identifying 21,764 malicious open source packages in the first quarter of the year and bringing the ...

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...

Security researchers at Malwarebytes have uncovered a new malware campaign targeting Windows users with a fraudulent clone of Microsoft's site.

Unknown attackers compromised the CPUID website, redirecting users to malware laden versions of popular tools.

Rowhammer attacks have been around since 2014, and mitigations are in place in most modern systems, but the team at gddr6.fail has found ways to apply the attack to current-generation GPUs.

Now a security researcher says a Reader hole has been quietly exploited by malware for as long as four months, fingerprinting ...

Iran-linked actors target U.S. PLCs using Dropbear and SSH access, disrupting OT systems across sectors and escalating cyber ...

A major JavaScript security scare unfolded after malicious versions of a widely used package were briefly published to npm ...

Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.

The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.

In order to spread Vidar information-stealing malware, threat actors are taking advantage of the recent Claude Code source ...