News

VirusTotal has discovered a phishing campaign hidden in SVG files that create convincing portals impersonating Colombia's ...
A computer scientist used only “pure SQL” to construct a multiplayer DOOM-like game. The resulting first-person shooter game, ...
Browser extensions boost productivity—but also open the door to hidden risks like data exfiltration and AitM attacks. Keep ...
Discover VSCodium, the community-driven, open-source version of VS Code that prioritizes privacy and freedom. Enjoy the same ...
CISA warns of critical WhatsApp zero-day vulnerability CVE-2025-55177 being actively exploited, requiring immediate patching by September 23 deadline.
A critical vulnerability that could lead to account takeover and remote code execution has been patched in Magento and Adobe ...
"debug" package attack failed; malicious update detected early, minimal impact. Developers urged to check their installations ...
Ledger CTO cautions that there is an NPM supply chain attack on the rampage. He encouraged users to cease risky on-chain ...
Malware hidden in widely used libraries like chalk and debug hijacked crypto transactions via browser APIs, exposing deep ...
IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...
Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...
Foundational Pillars Of Cloud Automation Before we get into the fancy tools and multi-cloud setups, let’s talk ...