Cyber spies linked to the Chinese government exploited a Windows shortcut vulnerability disclosed in March – but that Microsoft hasn't fixed yet – to target ...
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...
Introduction GitHub is the largest platform for software development and version control, enabling millions of developers to collaborate and share code.
GREYVIBE targeted Ukraine since August 2025 using AI-assisted malware campaigns, increasing espionage capabilities and attribution challenges.
Russia-linked GreyVibe hackers used generative AI to accelerate phishing, malware development, and cyberattacks.
Cybercriminals used the Glassworm botnet to infect open source software projects with malware, and in turn hack the ...
CrowdStrike, Google, and the Shadowserver Foundation dismantled the GlassWorm malware operation, but experts say the broader ...
CrowdStrike, Google, and the Shadowserver Foundation dismantled the GlassWorm malware operation, but experts say the broader ...
A previously unreported threat actor has been observed targeting cryptocurrency firms with custom macOS malware, fake ...
Suswati Basu is a multilingual, award-winning editor. She was shortlisted for the Guardian Mary Stott Prize and longlisted for the Guardian International Development Journalism Award.… According to ...
GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results