ESET researchers present technical details on a recent data destruction incident affecting a company in Poland’s energy sector.
Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.
By tapping the unusual .scr file type, attackers leverage "executables that don't always receive executable-level controls," ...
Key cyber updates on ransomware, cloud intrusions, phishing, botnets, supply-chain risks, and nation-state threat activity.
CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable ...
In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...
Too slow react-ion time Baddies are exploiting a critical bug in React Native's Metro development server to deliver malware ...
Notepad++ update servers were compromised for 6 months in 2025. Learn how the Chrysalis backdoor targeted users and why you must manually update to version 8.9.1 now.