Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The July 2026 release of Falcon Cloud Security introduces features to help security teams respond more quickly to cloud threats. It emphasizes automation and enhanced visibility to streamline operations.
Two compromised npm packages, @joyfill/[email protected] and @joyfill/[email protected], were found to deliver a remote access trojan (RAT) when imported into Node.js applications. The malware, linked to the DEV#POPPER family, uses a multi-blockchain resolver (Tron, Aptos, and BNB Smart Chain) to fetch encrypted payloads, a technique associated with the PolinRider threat cluster.
Beta versions of two npm packages in the @joyfill namespace were compromised to deliver a remote access trojan (RAT) associated with the DEV#POPPER malware family. The implant executes when Node.js loads the CommonJS package entry point and uses a multi-blockchain resolver structure (Tron, Aptos, BNB Smart Chain) for command-and-control, linking it to the PolinRider threat cluster and Contagious Interview campaign.
This FAQ details a coordinated cyberattack on US water utilities that impacted at least 12 states. It covers operational effects, attack indicators, and defensive measures for exposed infrastructure.
A coordinated cyber attack disrupted water systems across more than 30 Minnesota communities.
A coordinated cyberattack targeted water and wastewater systems in over 30 Minnesota communities. The timing aligns with recent activity against exposed PLCs.