Two malicious versions of Axios, the most downloaded JavaScript HTTP client library, were briefly published to NPM and contained a cross-platform RAT. Google has attributed the attack to suspected North Korean threat actor UNC1069.
CrowdStrike has integrated Microsoft Defender for Endpoint telemetry into its Falcon Next-Gen SIEM, marking a significant shift in the once-adversarial relationship between the two cybersecurity giants.
A new malware-as-a-service platform called Venom Stealer automates every stage of ClickFix-style social engineering attacks, from initial infection to cryptocurrency wallet draining, for as little as $250 a month.
Cisco Talos has uncovered a widespread credential theft campaign by threat cluster UAT-10608, which exploits CVE-2025-55182 in Next.js apps and deploys an automated tool called NEXUS Listener to exfiltrate secrets from at least 766 compromised hosts.
Reddit CISO Frederick Lee and Omdia principal analyst Dave Gruber explain how AI is delivering real value in cybersecurity today — from automating runbooks to accelerating threat intelligence — and what risks organizations must still navigate.
A cybercrime group called TeamPCP has deployed a self-propagating worm that wipes data on systems configured for Iran's timezone or Farsi language, while also conducting supply chain attacks against cloud security tools Trivy and KICS.
A chief medical information officer at San Joaquin General Hospital told RSAC 2026 attendees that preparation and repeated rehearsal—not just downtime playbooks—are what truly determine whether a ransomware attack on a healthcare facility escalates or stabilizes.
AI dominated conversations at RSAC 2026 Conference, but new research reveals that cybersecurity professionals face mounting stress, widening skills gaps, and growing complexity — making the human factor more critical than ever.
Cybercriminals on platforms like Telegram and Discord are increasingly using emojis to signal, obfuscate, and coordinate malicious activity, bypassing keyword filters and complicating automated monitoring efforts.
A threat actor used AI-assisted automation to launch more than 500 malicious pull requests against GitHub repositories, compromising at least two NPM packages in a campaign tracked as 'prt-scan.'