CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Pro tip, don't install PowerShell commands without approval A team of data thieves has doubled down by developing its ...

Security researchers found malware packages using the Ethereum blockchain to conceal malicious commands on GitHub repos.

ReversingLabs reveals hackers using Ethereum Smart contracts in NPM packages to conceal malware URLs, bypass scans, and ...

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...

Burmese pythons pose a huge threat to native species in the Florida Everglades. Officials have used creative methods to ...

Unique cake decorating ideas with a world cake and a virus-inspired cake, both featuring fun details and masks. Path of potential cyclone behind Hurricane Erin suddenly shifts A Massive New Study Says ...

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

Anthropic has released a new threat intelligence report outlining how cybercriminals are misusing advanced AI models for ...

Cybersecurity firm HiddenLayer uncovers a “CopyPasta License Attack” that exploits Coinbase’s favored AI coding tool, Cursor.