Two malicious versions of Axios, the most downloaded JavaScript HTTP client library, were briefly published to NPM and contained a cross-platform RAT. Google has attributed the attack to suspected North Korean threat actor UNC1069.
FINRA has officially launched the Financial Intelligence Fusion Center (FIFC), a secure portal designed to enable real-time threat intelligence sharing between FINRA and its member brokerage firms to combat cybersecurity and fraud threats.
Federal agencies issued an urgent joint warning that Iranian government-linked hackers are actively disrupting programmable logic controllers and SCADA systems at American critical infrastructure facilities, with new victims reported since March.
Anthropic has launched Project Glasswing alongside Amazon, Apple, Microsoft, and others, deploying an unreleased AI model that has already uncovered thousands of previously unknown vulnerabilities—including bugs decades old.
Microsoft Threat Intelligence has detailed how the financially motivated group Storm-1175 is conducting rapid ransomware campaigns, moving from initial exploitation to Medusa ransomware delivery in as little as 24 hours.
A court-authorized FBI-led operation has neutralized a massive Russian state-sponsored espionage network that hijacked over 18,000 routers across more than 120 countries, disrupting credential-theft campaigns tied to GRU unit APT28.
The Department of Commerce is soliciting proposals to assemble a government-backed catalog of full-stack American AI technologies for promotion to allies and partners abroad, as mandated by President Trump's AI executive order.
A coordinated investigation by Access Now, Lookout, and SMEX has exposed an ongoing spyware campaign linked to the Bitter APT group targeting journalists and civil society members across the Middle East and North Africa since at least 2022.
Orange Business is rolling out branded calling, deepfake detection, and AI-augmented telephony to address rising impersonation fraud and eroding trust in enterprise voice channels across more than 7,000 enterprise customers worldwide.
Bitcoin ATM operator Bitcoin Depot confirmed that attackers stole approximately 50.903 Bitcoin worth $3.665 million from its corporate wallets after breaching its IT systems on March 23, 2026.