Infosec In Brief A pair of Congressional Democrats have demanded a review of the Common Vulnerabilities and Exposures (CVE) ...

The new malware exploits a weakness in Discord’s invitation system to deliver an information stealer known as Skuld and the ...

The fact that payload delivery and data exfiltration occur via trusted cloud services such as GitHub, Bitbucket, Pastebin, ...

Hackers are hijacking expired or deleted Discord invite links to redirect users to malicious sites that deliver remote access ...

A new Rust‑ based info‑stealer called Myth Stealer spreads via fake gaming sites, targeting Chrome and Firefox credentials with loaders.

Sophos thinks a single person or group called "ischhfd83" is behind more than a hundred backdoored malware variants targeting ...

A single typo could let hackers hijack your system using malware hidden in fake packages Cross-platform malware now fools ...

A new malware campaign using fake DocuSign verification pages to deploy the NetSupport Remote Access Trojan (RAT) has been ...

Cybersecurity researchers have discovered a new cryptojacking campaign that's targeting publicly accessible DevOps web servers such as those associated with Docker, Gitea, and HashiCorp Consul and ...

Attackers are exploiting misconfigured Open WebUI, a web-based interface for AI models with AI-generated malware.

Moonlock has been tracking malware that's distributing a malicious clone of Ledger Live since August, with at least four active campaigns ... Ledger secures Discord after hacker bot tried to ...