Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain ...

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites | Read more hacking news on The Hacker News ...

A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals ...

Polymarket, a decentralized prediction market platform, acknowledged that several user accounts experienced losses due to a ...

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing ...

The Stealka malware is inserted into pirated mods for video games including Roblox, and can lift sensitive info from apps.

According to research from Kaspersky, scammers are inserting malware into pirate mods for Roblox and other games to steal ...

Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

Two Google Chrome extensions secretly stole login information from over 170 websites; iPhone 13, iPhone 12, and iPhone 11 ...

The majority of crypto exploits in the coming year won’t be caused by a zero-day bug in your favorite protocol, say crypto ...