A malware named IronWorm spread through 36 npm packages in the Arweave ecosystem, stealing developer credentials and self ...

As if the Miasma situation weren't bad enough, now this weapon is spreading like wildfire. Someone open sourced the entire ...

Multiple npm supply chain attacks used 50+ poisoned packages to spread IronWorm, a Rust-based stealer, and a Miasma worm ...

GitHub disabled 73 repositories across four Microsoft organizations on June 5 after the self-replicating supply-chain campaign known as ...

A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm. The malware targets 86 environment variables (key-value pairs) and ...

Researchers uncovered a global phishing network using Google Cloud redirects and copied news content across thousands of ...

The war in Ukraine has reached a turning point. Since the failure of Ukraine’s 2023 counteroffensive, Russia’s full-scale invasion settled into a predictable rhythm of summer and winter offensives, ...

A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers.

Researchers at Comparitech want to understand the systems working behind spam emails that promise some sort of reward, whether it’s cash or those health products that claim to perform miracles. So, ...

It's been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there's a supply chain attack ...