Microsoft researchers have identified a new variant of XCSSET, the macOS-targeting malware that has plagued developers since 2020. This family, notorious for spreading through Xcode projects by embedding malicious code, has now evolved with...
Developers have long placed their trust in tools that allow AI assistants to handle routine tasks—ranging from sending emails to managing databases. Yet that trust has proven a vulnerability: beginning with version 1.0.16, the...
Zscaler ThreatLabz, in its recent report, disclosed the details of a newly observed malware family dubbed YiBackdoor, first detected in June 2025. From the outset, analysts noted substantial source-code commonalities with the IcedID and...
Socket Threat Research has discovered a malicious NPM package named fezbox, published by a user going by janedu. Ostensibly a harmless library, the package conceals an unusually sophisticated payload: it uses a QR code...
In early September, South Korea experienced a major cyberattack that affected nearly twenty asset management firms. According to industry sources, the breach was carried out through a cloud server belonging to an IT contractor,...
Amid a surge in cybercriminal activity, Darktrace has uncovered a new campaign powered by the ShadowV2 botnet. Researchers first observed the malicious infrastructure on June 24, 2025, when their traps were triggered. At the...
Cybercriminals have launched a large-scale campaign against macOS users, disguising malware as popular applications. The alert comes from LastPass, which reported that its own product was among those impersonated. Distribution is carried out through...
Artificial intelligence has made web development accessible to the masses: today, even those without programming skills can build a website or application using AI-powered services. These platforms enable projects to launch with remarkable speed...
The BlackLock group, formerly known as El Dorado, has in recent months established itself as one of the most prominent actors in the ransomware arena. Research by the AhnLab Security Intelligence Center (ASEC) reveals...
SentinelLABS researchers have uncovered what they describe as the earliest known sample of malware embedding LLM capabilities — a specimen dubbed MalTerminal. Presented at LABScon 2025, their report catalogs a collection of artifacts: a...
A phishing campaign targeting figures in the cryptocurrency industry has come to light after researcher José A. Gómez Ledesma of the Quetzal team reported a string of attacks masquerading as invitations to appear on...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about two distinct malware frameworks uncovered within the network of an unnamed organization, following the exploitation of newly disclosed vulnerabilities in Ivanti...
