Cybersecurity researchers have flagged an active browser extension campaign designed to steal cryptocurrency by stealthily replacing wallet addresses during transactions. The cryptocurrency…
VPN Go is a pair of malicious Chrome and Firefox extensions posing as free VPN tools. They contain clipboard theft logic that…
Cybersecurity researchers have flagged a new evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family,…
Attackers hijacked over 400 packages in the Arch User Repository (AUR) by adopting orphaned projects and modifying build scripts to deploy a…
Cybersecurity researchers have uncovered a network of 152 Google Chrome extensions posing as live wallpaper add-ons that distribute a potentially unwanted program…
On June 17, 2026, a software supply chain attack codenamed 'easy-day-js' compromised 145 npm packages under the @mastra/* namespace, a popular open-source…
GitHub has announced a critical security update to its official actions/checkout action, effective June 18, 2026, designed to block common pwn request…
Socket is a cybersecurity company that reported on the malicious VPN Go browser extensions, which contain clipboard stealing functionality and exfiltrate sensitive…