Check Point Research has uncovered JSCeal, a sophisticated compiled V8 JavaScript malware that performs credential harvesting ...
JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...
JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency ...
A hacking group is targeting developers with fake coding challenges that hide cross-platform malware, infecting Windows, ...
Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...
A researcher tricked Claude Code into running attacker code up to 80% of the time. Anthropic says the behaviour is working as ...
Nimbus Manticore uses trojanized coding challenges to deploy NodeRabbit and PollCat RATs across Windows, Linux, and macOS.
A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations ...
A phishing page designed to evade security tools accidentally broke its own credential-stealing operation after a coding ...
Cybersecurity researchers have uncovered 24 malicious npm packages that abuse package mirror services to host obfuscated ...
Enterprise work now happens increasingly inside the browser, and that shift has made the browser a primary point of entry for cyberattacks as well. Browser-based attacks have surged over the past two ...
The Shai Hulud variant’s blast radius includes several highly popular packages thus far.. Security teams are urged to perform full audits of all developer machines. A self-propagating worm-like attack ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results