The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked spyware. Apple and Google report that, in recent days, they have dispatched a new wave of...
Researchers at Striker STAR Labs have detailed a new attack against agent-based browsers that can turn an ordinary email in a user’s inbox into an almost complete Google Drive wiper. The target is Comet...
The new malicious distribution tool GhostFrame has spread with remarkable speed throughout the cybercriminal ecosystem, becoming the source of more than one million phishing attacks. Its emergence has drawn the close attention of security...
At the end of November, a team of bug hunters uncovered an infection chain that began with a seemingly harmless GitHub repository. Masquerading as a Visual Studio Code project, it concealed VBScript files linked...
Chinese cyber-espionage actors have spent years burrowed, undetected, within the networks of critical organizations, infiltrating infrastructure with sophisticated malware and exfiltrating sensitive data, government agencies and private researchers warn. According to a joint advisory...
The GoldFactory group has launched a new wave of attacks targeting mobile-banking users across Southeast Asia. Disguising themselves as government agencies and well-known corporations, the attackers distribute tampered banking applications. According to Group-IB, more...
A new case of software supply-chain compromise has been uncovered on the crates.io platform: a malicious Rust package was silently infecting the workstations of Web3 developers, disguising itself as an auxiliary tool for the...
The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are now documenting a third wave of malicious uploads to the OpenVSX repository and the Microsoft Visual Studio...
In the third quarter of 2025, Beazley Security Labs recorded a sharp surge in the activity of major ransomware groups and the emergence of new delivery mechanisms for infostealers. The primary cybercriminal campaigns centered...
For the PostHog team, developers of an open-source analytics platform, the recent npm-based attack has become the most serious security incident in the project’s history. The root of the breach was a malicious release...
North Korea’s Contagious Interview malware campaign continues to escalate its pressure on the JavaScript-development ecosystem. Threat actors affiliated with DPRK hacking units are massively uploading malicious packages to the npm repository, disguising spyware distribution...
Against the backdrop of a surge in schemes involving the remote manipulation of infected devices, a new tool for attacking Android has emerged on the cybercrime market. Threat-analysis firms report the appearance of several...
