Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records.

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

Malicious npm package indexed-btree hid its loader in runtime code, avoiding install hooks after logging millions of downloads.

Are you still 'using AI all by yourself'?Opening ChatGPT or Claude, typing in a prompt, copying and pasting the returned answer, and then typing in the next instruction—.This was the 'standard way of ...

Tech executive-turned-philanthropist announces $1.5-million gift, plus $1-million each to Cambridge, Fergus and Guelph ...

The upstart underdog will have to persuade Ottawa that it’s up to the job as the Carney government pushes to re-arm in the face of new threats ...

WordPress malware hides as a must-use plugin and uses blockchain C2 to steal data and persist on compromised sites.

FBI, BND and Japan's NPA name WaterPlum: 30,000 infected machines, 7,000 drained wallets. Spot the fake job offer and protect ...

Hackers claim breach of Russia's election commission; OpenAI was behind the RubyGems May incident; Gyazo and Revolut got ...

Christine Lemmer-Webber and David Thompson explain how Spritely's architecture solves core decentralization challenges. They ...