North Korean hackers abuse Visual Studio Code task files in fake job projects to deploy backdoors, spyware, and crypto miners ...

A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized ...

North Korean hackers target macOS developers with malware hidden in Visual Studio Code task configuration files.

Hackers collect $439,250 after exploiting 29 zero-day vulnerabilities on the second day of Pwn2Own Automotive 2026.

Cisco announced patches for CVE-2026-20045, a zero-day vulnerability in Unified CM that has been targeted by hackers.

Unlike traditional attacks that rely on exploits, this succeeds through social engineering combined with abuse of Windows' own security architecture.

Threat actors are exploiting misconfigured web applications used for security training and internal penetration testing, such ...

New Windows malware abuses built-in security logic to disable Microsoft Defender, steal data, and encrypt files without using exploits.

Broadcom patches these router-disabling Wi-fi flaws ...

MakindaFi, a DeFi engine, exploited for 1,299 ETH ($4.13M) via Uniswap V3; PeckShield flagged MEV-linked transaction drain.

If you skipped it back then, now’s a very good time You've got to keep your software updated. Some unknown miscreants are ...

North Korean-linked hackers targeted more than 3,100 IP addresses tied to AI, crypto, and finance firms using fake job interviews, security researchers said.