A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Microsoft has identified an active supply chain attack targeting the npm package ecosystem. On May 28, 2026, a single threat actor operating under the newly created maintainer alias vpmdhaj (a39155771 ...

The PureLogs module targeted a wide range of browsers, including Google Chrome, Microsoft Edge, Brave, Opera, Yandex Browser, ...

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

Ghostwriter used Prometheus lures since spring 2026 to target Ukraine agencies, enabling malware delivery and data theft.

A legacy Windows scripting utility tied to Internet Explorer is still being used in modern malware campaigns, researchers say.

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker ...

If Christa Gail Pike's execution proceeds as planned next year, she will become the first woman put to death in Tennessee since the state began to formally document capital punishment more than a ...

I'm using a Windows application called CHM To Exe to convert CHM files into executable format. After the conversion, all JavaScript functionality inside the CHM content breaks and doesn't run at all ...

If I launch the program's .exe Heroic while it's running it will show up normally but also with a Javascript error window (image attached). (13:59:22) [INFO ...