Two malicious versions of Axios, the most downloaded JavaScript HTTP client library, were briefly published to NPM and contained a cross-platform RAT. Google has attributed the attack to suspected North Korean threat actor UNC1069.
Dutch EHR vendor ChipSoft has been struck by a ransomware attack, forcing the company to take its website and patient-facing digital services offline and prompting warnings to connected hospitals across the Netherlands and Belgium.
New research from CalTech and Google suggests fault-tolerant quantum computers capable of breaking classical encryption may need far fewer qubits than previously thought, compressing the window for post-quantum migration.
Researchers at Censys have identified more than 5,200 internet-exposed Rockwell Automation/Allen-Bradley PLCs potentially vulnerable to Iranian state-backed attackers, with nearly 3,900 of those devices located in the United States.
A previously undocumented phishing-as-a-service platform called VENOM is targeting Microsoft account credentials belonging to CEOs, CFOs, and VPs across multiple industries, using AiTM techniques and QR code lures.
Researchers at Comparitech discovered 179 industrial control devices accessible without authentication via the Modbus protocol, as the US government warns of state-sponsored attacks targeting programmable logic controllers in critical infrastructure.
A newly discovered Lua-based malware called LucidRook is being deployed against non-governmental organizations and universities in Taiwan via spear-phishing campaigns. Cisco Talos attributes the threat to a group tracked as UAT-10362.
Senate Judiciary Committee Chair Chuck Grassley has launched a congressional inquiry into eight major technology companies, citing failures to provide adequate data to a child exploitation cyber tipline operated by NCMEC.
A ransomware attack on Dutch healthcare software vendor ChipSoft on April 7 forced the company to disable key digital platforms used by roughly 70% of Netherlands hospitals, triggering widespread logistical disruptions.
Microsoft researchers discovered a critical intent-redirection vulnerability in EngageLab's EngageSDK, a third-party Android SDK embedded in cryptocurrency wallet apps with over 30 million combined installs.