For the past four months, over 130 malicious NPM packages deploying information stealers have been collectively downloaded ...
The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...
An attack campaign undertaken by a Vietnam-aligned hacking group known as OceanLotus (aka APT-Q-31) that delivers the Havoc post-exploitation framework in attacks targeting enterprises and government ...
Learn how attackers abused Microsoft Teams tokens, how Microsoft fixed the flaw, and how defenders can detect, revoke, and ...