malware threat

A flaw in the EngageLab SDK exposed 50 million Android users, allowing malicious apps to exploit trusted permissions and access sensitive data. TechRepublic Get the web's best business technology news ...

New Laughing Rat Virus Steals Your Data and Laughs at You

Cybersecurity researchers have identified a new malware-as-a-service platform called CrystalX RAT, which combines traditional ...

Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime

Threat actors are exploiting vacant homes as "drop addresses" to intercept mail and enable fraud. Flare shows how postal ...

malware delivery

Hackers are using WhatsApp messages to deliver malware to Windows PCs, exploiting user trust and attachments to trigger stealthy, multi-stage attacks.
Bitdefender

The Scam That Tricks You Into Infecting Your Own Mac

With macOS 26.4, Apple is now warning users before they paste potentially dangerous commands into the Terminal app.
Inc

Malware in an Open-Source Project Could Have Infected Thousands. The Twist? It Was Certified by Delve

The compromise happened despite the fact that LiteLLM boasts two major compliance certifications. The provider? Embattled startup Delve. “Brought to you by Delve,” one Redditor snarked in the ...
IEEE

Unveiling Malware Visual Patterns: A Self-Analysis Perspective

Abstract: The widespread usage of Microsoft Windows has unfortunately led to a surge in malware, posing a serious threat to the security and privacy of millions of users. In response, the research ...
Bleeping Computer

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...
The Hacker News

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

The GlassWorm malware campaign is being used to fuel an ongoing attack that leverages the stolen GitHub tokens to inject malware into hundreds of Python repositories. "The attack targets Python ...
Dark Reading

GlassWorm Malware Evolves to Hide in Dependencies

The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research. GlassWorm is a family of malware that first emerged last year with the goal of infecting ...
CSOonline

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace checks and silently installing malware onto developers’ systems. Threat ...
Mashable

Popular Chrome extension disabled for containing malware

Do you use the Chrome extension "Save image as Type?" If so, you are one of more than one million users who woke up this morning to find out that Google has disabled the extension in your Chrome web ...