Tag Archives: Malware
npm Supply Chain Attack: Self-Propagating Shai-Hulud Worm Hits Millions
A massive npm supply chain attack involving the self-propagating Shai-Hulud worm has compromised over 1,300 package versions, threatening developers worldwide. Continue reading
DOUBLECUP ClickFix Service Hides Malware in Cached Browser Images
Discover how the new DOUBLECUP ClickFix Service bypasses security by hiding advanced malware payloads inside cached browser images. Continue reading
CVE-2026-48558: SimpleHelp Vulnerability Exploited to Deploy Djinn Stealer
Discover how attackers are leveraging the critical CVE-2026-48558 vulnerability in SimpleHelp to bypass authentication and deploy TaskWeaver and Djinn Stealer malware. Continue reading
TonRAT Malware: New Hospitality Phishing Campaign Uses Authentication Laundering
Discover how the stealthy TonRAT malware targets hospitality staff using sophisticated authentication laundering and malicious Node.js payloads to bypass security filters. Continue reading
Voidrift Malware Targets World Cup Fans with Sophisticated Phishing
A new World Cup-themed phishing campaign is using highly personalized lures to distribute the stealthy Voidrift malware, successfully bypassing major security gateways. Continue reading
AI Security Scanners Bypassed by Malicious CBRN Prompt Injection
New malware embeds forbidden CBRN text to trick AI security scanners, creating dangerous blind spots in automated code review pipelines. Continue reading
Data Breach Warning: 24 Billion Credentials Exposed in Elasticsearch Cluster
A massive data breach has exposed 24 billion plaintext credentials in an unsecured Elasticsearch cluster, highlighting the urgent need for robust password security. Continue reading
Arch Linux attack: Atomic Arch Campaign Compromises 2,000 AUR Packages
A massive Arch Linux attack known as Atomic Arch has compromised nearly 2,000 AUR packages to deploy rootkits and steal credentials from developers. Continue reading
HP Threat Insights Report 2026: RMM Abuse and AI Vibe Coding
The latest HP Threat Insights report reveals how cybercriminals are weaponizing legitimate RMM tools and leveraging AI vibe coding to bypass security measures. Continue reading