Two malicious versions of Axios, the most downloaded JavaScript HTTP client library, were briefly published to NPM and contained a cross-platform RAT. Google has attributed the attack to suspected North Korean threat actor UNC1069.
Brazilian threat group Water Saci, also known as Augmented Marauder, is running a wormable email campaign deploying the Casbaneiro banking Trojan against Spanish-speaking targets across Latin America and Spain.
Trend Micro research and a fresh FBI warning reveal that Russia's APT28 is targeting governments, defense contractors, and critical infrastructure worldwide using both old and new techniques. Experts say defenders don't need to match the group's sophistication — they just need to get the basics right.
Telehealth company Hims & Hers Health suffered a data breach through its third-party customer support platform, exposing protected health information including details tied to erectile dysfunction, hair loss, and mental health conditions.
At RSAC 2026, AI dominated conversations for the fourth consecutive year, with industry leaders debating agentic systems, SOC replacement, and whether humans can realistically stay in every security decision loop.
Anthropic unveiled Claude Mythos Preview on April 7, an LLM capable of finding and exploiting zero-days across major operating systems and browsers. The company's Project Glasswing initiative aims to keep the powerful model in defensive hands, but experts remain skeptical.
Fraud across Latin America's digital banking sector is accelerating faster than any other global region, fueled by social engineering, account takeovers, and mobile-focused attack chains, according to a new BioCatch report.
A researcher using the alias 'Chaotic Eclipse' publicly released a proof-of-concept exploit for an unpatched Windows zero-day called BlueHammer, citing frustration with Microsoft's Security Response Center. Security experts warn ransomware gangs and APT groups could weaponize the exploit within days.
The FBI's Internet Crime Complaint Center recorded nearly $20.9 billion in cybercrime losses in 2025, a 26% rise from the prior year and a staggering 400% increase since 2020, according to the agency's annual report.
Russian GRU-linked hackers known as Forest Blizzard exploited vulnerabilities in outdated SOHO routers to redirect DNS traffic and harvest Microsoft Office authentication tokens from over 18,000 networks without deploying any malware.