A malicious change was made to the legitimate QuickFox VPN installer, allowing it to secretly download a backdoor onto ...

BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

DeadLock ransomware uses Polygon smart contracts, Session, and blockchain-hosted leak content to make extortion infrastructure harder to disrupt.

Nutanix puts agentic AI into action for enterprisesMCP server for Nutanix Cloud Platform brings secure, natural-language, agentic AI automation to hybrid multicloud environments without sacrificing ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

FortiGuard exposes year-long QuickFox VPN supply chain attack deploying FDMTP implant on corporate Windows machines only.

Development environments have evolved into toolkits for directing coding models and coordinating agents. GitHub Copilot, ...

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

Seqrite warns that attackers are using SVG files to hide malicious JavaScript and phishing redirects, creating a new security ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...

A massive supply chain attack on the Node Package Manager (npm) registry has infected over 400 packages with over 2 billion downloads with the ...

BdThemes supply chain attack poisons JSON feed to create rogue WordPress admins and deploy web shells without code changes.