GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.

Build a music collection without paying for every track. These 10 sites offer free albums, live recordings, classical music, ...

KryonOS is a small JavaScript-powered OS that turns a supported ESP32 development board with a touchscreen into a standalone ...

Nonprofit research organization Transluce published a report on September 23 analyzing 37,649 public records from the URL ...

North Korea-linked hackers are targeting people and organizations focused on Ukraine with fake PDF documents that install a PowerShell ...

WordPress Click2Shell vulnerability lets attackers silently install themes on any admin’s site via a single crafted link, then chain to full server-level code execution. WordPress patched the flaw in ...

Brevo supply-chain attack injected malicious JavaScript into 100,000+ sites, targeting WordPress admins and visitors with ClickFix prompts.

UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, ...

Instagram is one of the most popular platforms for sharing videos, Reels, Stories and photos, but downloading content from other users is not always straightforward. While Instagram provides official ...

A group of undisclosed documents related to government investigations of Jeffrey Epstein can be made public under the 2025 law requiring release of the Epstein files, a federal judge ruled. US ...