Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

A woman who abused and killed her stepdaughter was executed on Tuesday in Fujian province after the top court approved her death sentence, local authorities said. Xu Jinhua was put to death by the ...

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

A PreToolUse hook that intercepts and blocks destructive git and filesystem commands before AI coding agents run them. CC Safety Net parses command semantics — so flag reordering, shell wrappers, and ...

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the ...

Claude Code dynamic workflows are now generally available on all paid plans, including Pro for the first time. The feature writes its own orchestration scripts and coordinates up to 1,000 parallel ...

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...

Installing a piece of code from NPM will no longer auto-run malware on the system, and won’t quietly pull malicious code from external repos unless the developer explicitly allows it. But this won’t ...

PayU, India’s leading diversified fintech platform, has announced two new developer tools designed to streamline modern payment workflows: PayU CLI and Builder MCP. The tools aim to simplify ...