The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...

For the past four months, over 130 malicious NPM packages deploying information stealers have been collectively downloaded ...

An attack campaign undertaken by a Vietnam-aligned hacking group known as OceanLotus (aka APT-Q-31) that delivers the Havoc post-exploitation framework in attacks targeting enterprises and government ...

Learn how attackers abused Microsoft Teams tokens, how Microsoft fixed the flaw, and how defenders can detect, revoke, and ...