Claude Code leak used to push infostealer malware on GitHub

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar ...

Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Hacker hijacks Axios open-source project, used by millions, to push malware

A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...

Hackers compromise popular Axios Javascript library with hidden malware

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
Microsoft

WhatsApp malware campaign delivers VBScript and MSI backdoors

A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...
Macworld

DarkSword malware targets iPhones that haven’t been updated yet

Macworld reports on DarkSword malware targeting iPhones running iOS versions 18.4 through 18.7, exploiting six security vulnerabilities to steal data and track users. Google’s Threat Intelligence ...

A popular coding tool was hijacked to deliver malware.

A hacker took over an account belonging to the lead maintainer of the JavaScript library, Axios, which is used to handle HTTP requests, as reported by Cybernews. Security researchers found that ...
Morningstar

ThreatDown Uncovers First Cyber Attack Abusing Deno JavaScript Runtime for Fileless Malware Delivery

ThreatDown’s EDR team discovered a sophisticated, multi-stage attack chain during an active investigation; the first documented case of attackers abusing the Deno runtime as a malware execution ...
GameSpot

After Infecting PCs With Malware, Gacha Game Gives Out Free Loot Boxes To Apologize

GameSpot may get a commission from retail offers. The creators of free-to-play gacha RPG Duet Night Abyss have publicly apologized for a "cybersecurity incident" that saw players' PCs infected with ...
MarketWatch

ThreatDown Uncovers First Cyber Attack Abusing Deno JavaScript Runtime for Fileless Malware Delivery

The MarketWatch News Department was not involved in the creation of this content. -- ThreatDown's EDR team discovered a sophisticated, multi-stage attack chain during an active investigation; the ...
Gulf News

UAE Cyber Security Council warns against wiper malware threat

The UAE Cyber Security Council has urged individuals and organisations to remain vigilant against Wiper Malware, one of the most destructive forms of malicious software designed to erase data and ...