A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

APT29-linked attackers use compromised sites and Plerdy analytics to deliver iOS and Android exploits that steal browser and ...

In November 2026, the Windows PC launcher for the popular game 'Goddess of Victory: NIKKE' was tampered with by a third party ...

Lockdown Mode was bypassed with HTML popups but OpenAI now fixed it.

Hackers from North Korea are notoriously effective at stealing crypto, with one estimate attributing 60% of all losses last ...

npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...

CISA adds Apple CVE-2024-27834 to its KEV catalog after reports of active exploitation involving a pointer authentication bypass.

NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware ...

CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...

Concerns are growing among game fans following analysis indicating that launching the 'Goddess of Victory: Nikke' PC launcher ...

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and ...