Socket found seven malicious packages on PyPI The packages were abusing Gmail and WebSocket They were removed from the platform Several malicious PyPI packages were recently observed abusing Gmail to ...
A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...
Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...
Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by ...
An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware ...
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...
Elysse Bell is a finance and business writer for Investopedia. She writes about small business, personal finance, technology, and more. Samantha (Sam) Silberstein, CFP®, CSLP®, EA, is an experienced ...