cyber security

We talk about all the newest stories and changes in cybersecurity in this section. It includes news about new threats, data breaches, and cyberattacks, as well as improvements to security tools and methods. We also give you information about changes in regulations, industry trends, and expert studies to help you stay safe and up-to-date in the constantly changing digital world.

Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware

A threat actor published a malicious version of the tensorlake npm package on October 8, 2026, embedding a new variant…

4 hours ago

16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys

16 malicious Firefox extensions that impersonate cryptocurrency wallets to intercept recovery phrases and private keys during wallet imports. Disguised as…

5 hours ago

Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones

Exposed directories on five servers have revealed an operational DarkSword/Coruna exploitation platform built to compromise iPhones and harvest cryptocurrency wallet…

6 hours ago

Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets

A financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from…

7 hours ago

Hackers Target Hotels With Fake Guest Complaints to Deploy Blockchain-Based RAT Malware

Hackers are targeting hotels with fabricated guest complaints and negative reviews to distribute EtherRAT and TONResolver, two malware families that…

8 hours ago

ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials

Threat actors are increasingly using blockchain networks as resilient command-and-control infrastructure to steal cloud credentials from developer endpoints and CI/CD…

9 hours ago

Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access

Attackers are exploiting CVE-2026-88771, a critical pre-authentication command-injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway, to deploy reverse shells,…

10 hours ago

Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens

Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security…

11 hours ago

PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion

A cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing…

12 hours ago

Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets.

MALFEX, a persistent npm supply-chain campaign distributing Windows malware through eight malicious packages. Linked to an apparent single operator active…

13 hours ago