NodeStealer now steals data and adds keylogging, clipboard monitoring, and screen capture, expanding into full surveillance.

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based ...

A password reset attack hit X (Twitter) on Tuesday. X found no breach and blames attackers chasing X Money wallets.

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an ...

A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates ...

We found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on Cosmos SDK, that lets any user grant themselves admin control over marker accounts without holding a single ...

A previously undocumented malware loader, dubbed SynkLoader, that combines Python, C#, and native C++ components to evade ...

SynkLoader malware is spreading through Microsoft Teams phishing, using a fake Windows lock screen to steal credentials and enable remote access.

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP ...

Bob Bramblet is a Lee County Sheriff's Office employee, outdoorsman, and award-winning writer. He hunts invasive Burmese pythons in the Everglades to protect native wildlife. Bramblet has written a ...

Microsoft released a record number of security patches for Windows, Office, and other tech product lines this week, citing the use of AI to aid the discovery of code vulnerabilities. The technology ...