The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are now documenting a third wave of malicious uploads to the OpenVSX repository and the Microsoft Visual Studio...
In the third quarter of 2025, Beazley Security Labs recorded a sharp surge in the activity of major ransomware groups and the emergence of new delivery mechanisms for infostealers. The primary cybercriminal campaigns centered...
Cyberattacks on decentralized finance projects strike DAOs far harder than the value of stolen assets suggests. A new study reveals that the primary damage is not direct losses, but the collapse in the value...
One of the most popular unofficial YouTube clients for Android TV has been compromised — a malicious build infiltrated the SmartTube application, signed with the developer’s stolen keys. The incident has raised serious concerns...
The Dutch authorities have released new data indicating that adolescents’ involvement in digital wrongdoing is typically fleeting. An analysis prepared for the House of Representatives reveals that early enthusiasm for hacking usually fades by...
Europol, in cooperation with international partners, has dismantled the cryptocurrency mixer Cryptomixer and seized the equivalent of €25 million in Bitcoin. The service, which had been operating since 2016 and helping criminals obscure the...
For the PostHog team, developers of an open-source analytics platform, the recent npm-based attack has become the most serious security incident in the project’s history. The root of the breach was a malicious release...
Digital calendars have long been a convenient way to stay organized amid daily routines, yet new research from Bitsight reveals that this familiar tool can be transformed into a fully fledged attack vector. Bitsight...
The American manufacturer of aerospace and defense components ADC Aerospace has come under scrutiny following a potential cyberattack: a post on the underground leak site operated by the ransomware group Play claims that corporate...
North Korea’s Contagious Interview malware campaign continues to escalate its pressure on the JavaScript-development ecosystem. Threat actors affiliated with DPRK hacking units are massively uploading malicious packages to the npm repository, disguising spyware distribution...
North Korea’s Lazarus hacking collective is intensifying its targeted phishing campaigns against cryptocurrency platforms and individual investors, amassing hundreds of millions of dollars in illicit gains. According to a report by AhnLab, the group...
The GrapheneOS mobile operating-system project has announced that it is severing ties with OVHcloud, expressing concern that French jurisdiction no longer offers a reliably secure environment for protecting user data and devices. The developers...
