GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Adobe patches a critical PDF flaw exploited for months, allowing attackers to bypass sandbox protections and deliver malware.

Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that ...

AI firm Anthropic accidentally leaked its Claude Code source code via an npm package, revealing unreleased features like an ...

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...

Although executed by different attackers – Axios by North Korean-linked goons, and Trivy et al. by a loosely knit band of ...

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

European digital assets have a habit of not staying European. A 'Buy European' label is not a sovereignty guarantee unless it ...

OpenAI is one of many organizations affected by the recent Axios supply chain attack attributed to North Korean hackers.

Oops. A 60MB source map file just leaked Anthropic's entire roadmap.