⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reports on a widespread npm worm that originated from a malicious version of the keyv package ([email protected]) and spread to hundreds of other packages. The malware uses preinstall scripts to steal credentials from developer workstations and CI systems, and can also plant hooks in Claude Code and VS Code.
This article from LevelBlue SpiderLabs discusses the July 2026 cyberattacks against U.S. water and wastewater systems. The organization has increased monitoring for related indicators of compromise across client environments.
This article details the SMOKE#SCREEN campaign, which uses social engineering lures like fake software updates to install ConnectWise ScreenConnect. The attackers employ a multi-stage toolkit including VBScript droppers and .NET executables, ultimately gaining persistent remote access via attacker-controlled relay servers.
This article details the SMOKE#SCREEN campaign, which uses social engineering lures like fake software updates to install ConnectWise ScreenConnect. The attackers employ a multi-stage toolkit including VBScript droppers and .NET executables, ultimately gaining persistent remote access via attacker-controlled relay servers.
This article details the SMOKE#SCREEN campaign, which uses social engineering lures like fake software updates to install ConnectWise ScreenConnect. The attackers employ a multi-stage toolkit including VBScript droppers and .NET executables, ultimately gaining persistent remote access via attacker-controlled relay servers.
Unit 42's NOVA system uses frontier AI to autonomously discover zero-day vulnerabilities in open-source software, finding over 14,000 unknown flaws. This represents a major shift toward automated, large-scale vulnerability research.