DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Amazon Threat Intelligence has tied a DPRK hacking group to four separate npm package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...

The new leader is spending the summer improving his French and trying to solve the puzzle of New Democratic futility in ...

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

What's CODE SWITCH? It's the fearless conversations about race that you've been waiting for. Hosted by journalists of color, our podcast tackles the subject of race with empathy and humor. We explore ...

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

The Shai Hulud variant’s blast radius includes several highly popular packages thus far.. Security teams are urged to perform ...

July 28, 2026 • Patriot Front is a white nationalist group that focuses on high visibility stunts, like banner drops, disrupting events, or swarming Washington, DC for Independence Day. Meanwhile, the ...