IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...

Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.

One of the most exciting challenges available to any software developer is that of writing brilliantly working code that’s so obtuse, so indecipherable, and opaque, that even its own author ...

A widely active phishing-as-a-service (PhaaS) operation known as FlowerStorm has begun using a browser-based virtual machine to conceal credential theft code, marking what researchers say is an ...

Prosecutors accused Dr. David Morens, a former adviser to Dr. Anthony S. Fauci, of hiding records related to the onset of the pandemic. By Benjamin Mueller Dr. David Morens, a former senior adviser to ...

The growing reliance on technology has generated substantial opportunity for cybercriminals to exploit vulnerabilities in devices, networks, and software systems. As an increasing number of ...

Morey J. Haber, Chief Security Advisor at BeyondTrust, is an identity and technical evangelist with over 25 years of IT industry experience. We often prepare for threats that are visible, and ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...