Cybersecurity

Threat actors are abusing the trusted, signed Node.js runtime to deploy malicious payloads, evading signature-based detection.Campaigns since February 2026 have targeted government departments, technology...

Cybersecurity firm ThreatFabric uncovered a new Android banking trojan called StreamRat, spread via fake TV-streaming ads on Meta that reached nearly 571,000 EU accounts.The...

Two critical vulnerabilities in GeoNetwork can be chained for unauthenticated remote code execution (RCE), affecting many government geoportals.The flaws exist in versions up to...

Researchers discovered 13 malicious Composer theme packages on Packagist targeting Vietnamese streaming sites with JavaScript injection.The attack deploys ad-fraud and, on unpatched iPhones, a...

AI safety non-profit METR suffered two security incidents in 2026 involving attempted system access and stolen API keys.A March incident saw attackers steal an...

Five critical vulnerabilities in popular WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, could allow attackers to take over...

ServiceNow released patches for four security flaws in its AI Platform, three rated a maximum CVSS 10.0 that allow unauthenticated remote code execution.The flaws...

The Australian Federal Police charged two Western Australian men with 14 offenses for their alleged role in the TeamPCP cybercrime group, which compromised open-source...