Browsing: Malicious

[Update 09:15 UTC, Sept. 23: This article was updated with comments from SlowMist on how FomoPeek operated, what its researchers…

Ravie LakshmananSep 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have disclosed details of a malicious npm package named “tw-pkgprobe-7731″…

A malicious npm package named “indexed-btree” has been observed hiding its malicious behavior within application code rather than using lifecycle…

An ongoing npm malware campaign involving the ‘indexed-btree’ package shows how threat actors bypass supply chain defenses by hiding malicious…

Swati KhandelwalSep 17, 2026Vulnerability / Artificial Intelligence Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape…

Security researcher Gal Weizman of Forever Security has disclosed a new attack technique that can hijack the AI assistants built…

Swati KhandelwalSep 17, 2026Vulnerability / DNS Security Every release of the Unbound DNS resolver before 1.26.1 has a critical heap…

On Monday, China’s foreign ministry spokesperson Guo Jiakun told reporters that “narratives of threat, confrontation, and malicious competition serve only…

Google Workspace attackers don’t necessarily need to exploit a software vulnerability or steal a user’s password to gain access to…

Ravie LakshmananSep 14, 2026Malware / Browser Security A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly…