IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

ClickFix attacks are delivering BabaDeda, Lorem Ipsum, and Potemkin loaders to deploy stealers, RATs, and ransomware-linked ...

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...

Cloudflare Inc. today said it has acquired VoidZero Inc., the open-source company behind Vite and the widely used JavaScript ...

The web version of the VS Code editor on GitHub.dev had a security vulnerability that allowed attackers to take over all of a ...

Three patched LangGraph flaws could let attackers chain SQL injection and unsafe deserialization for RCE in self-hosted ...

EVIO today celebrated the official opening of its new office in Dorval, bringing together the company's engineering, ...

Researchers at Cyera found six vulnerabilities in prtobuf.js, including a flaw that can turn attacker-controlled schema data ...

Essentially, Orban became a kind of “pet” autocrat of Europe’s mainstream center-right parties. Germany’s Christian Democrats and other EPP parties blocked the EU from sanctioning Orban for his ...

China is increasingly embracing the mantle that comes with being a global superpower. Its rise is forcing the rest of the world to assess its credentials as a potential hegemon and a provider of ...

July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...