Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
�� CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls ...
Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
The DarkSword iOS exploit chain was used by the Russian APT behind the Coruna exploit in attacks targeting Ukraine.
More than a few voters could find themselves unsatisfied with the Liberals and open to a hard-left turn in future elections ...
The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a ...
DarkSword exploit targets iOS 18.4–18.7 using 6 flaws and 3 zero-days, enabling rapid data theft from iPhones across multiple ...
A chain of vulnerabilities is letting attackers steal sensitive info from iPhones.
The ransomware gang, known for double-extortion attacks, had access to a critical Cisco firewall vulnerability weeks before ...
The US Cybersecurity and Infrastructure Security Agency (CISA) has told all federal civilian agencies to patch a critical ...
LeakNet ransomware uses ClickFix attacks on hacked sites to trick users into running malicious commands and stealing data.