Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware Ravie LakshmananSep 25, 2026Malware / Supply Chain Attack Two actions-cool…
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence Ravie LakshmananSep 25, 2026Malware / Social Engineering Cybersecurity researchers have flagged…
The SOC Doesn't Need to Start Over with Every Alert The Hacker NewsSep 25, 2026Artificial Intelligence / Security Operations Security leaders keep…
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories Ravie LakshmananSep 24, 2026Hacking News /…
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content Ravie LakshmananSep 24, 2026Phishing / Malware The "third-party[.]com" domain, commonly used as…
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer Ravie LakshmananSep 24, 2026Malware / Social Engineering An active ClickFix campaign…
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls Ravie LakshmananSep 24, 2026Artificial Intelligence / Malware The logistics sector…
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360 The Hacker NewsSep 24, 2026Social Engineering / Cybercrime…
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry Ravie LakshmananSep 23, 2026Malware / Supply Chain Cybersecurity researchers have…
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI Ravie LakshmananSep 23, 2026Malware / Cloud Security Unknown threat actors have…