The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a ...
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
Recent social engineering schemes involving WordPress and Microsoft’s Windows Terminal show that this relatively basic tactic ...
New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.