A supply chain compromise involving the widely used JavaScript package Axios is now being tied to a North Korea-linked threat ...

North Korean hackers compromised the widely used Axios JavaScript library to infiltrate US companies and steal cryptocurrency ...

After details of a yet-to-be-announced model were revealed due to the company leaving unpublished drafts of documents and ...

North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...

Interlock exploits CVE-2026-20131 zero-day since Jan 26, enabling root access on Cisco FMC, increasing ransomware risks.

OX Security reported a phishing campaign targeting developers using OpenClaw's name to lure victims into a fake site for ...

How can an extension change hands with no oversight?

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...

Abstract: Obfuscation modifies code structure to impede reverse engineering and is widely used to protect intellectual property and evade malware detection. However, existing deobfuscation techniques ...

Threat actors are operationalizing AI along the cyberattack lifecycle to accelerate tradecraft, abusing both intended model capabilities and jailbreaking techniques to bypass safeguards and perform ...