Malicious Packagist Laravel packages install a cross-platform RAT enabling remote shell access and system reconnaissance via C2 server.
Developers Can Now Search, Analyze, and Secure PHP Dependencies with AI-Powered Supply Chain Protection It would be ...
The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...
On February 24, 2026, we published an article about how a fake Zoom meeting “update” silently installs monitoring software, documenting a campaign that used a convincing fake Zoom waiting room to push ...
New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.
The eCOSS application is a digital platform introduced to record and manage the sale of subsidised one-kilogramme packet cooking oil, with the aim of curbing leakage and ensuring that supplies reach ...
If a user opened this Markdown file in Windows 11 Notepad versions 11.2510 and earlier and viewed it in Markdown mode, the above text would appear as a clickable link. If the link is clicked with ...
Google is finally rolling out Drive’s new local file backup feature for Android devices. We’ve been tracking the feature for months and can tell you exactly how it would work. Android will use Google ...
OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...
A first-of-its-kind Initiative puts Paramedics in Ultralight Vehicles Pivotal eVTOL Vehicle in Proof-of-Concept Program with ...
Dubbed InstallFix by Push Security, the scheme inserts instructions to download malware during the Claude Code install ...