The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python ...
A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...
The GlassWorm malware made news when it pivoted from exclusively targeting Windows users to also targeting Mac OS users in January, and in the time since, the malware campaign has spread across at ...
UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were ...
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...
Technology evolves faster every year, and the skills that were valuable just a few years ago can quickly become outdated. The good news is that updating your knowledge doesn’t always require going ...
USA₮ launches a Times Square takeover during NYC’s St. Patrick’s Day Parade, using immersive ads and QR codes to bring ...
GlassWorm uses Solana and Google Calendar dead drops to deliver RAT stealing browser data and crypto wallets, impacting ...
World introduces AgentKit to verify humans behind AI shopping agents, aiming to reduce fraud and improve trust in automated ...