npm ‘is’ Package With 2.8M Weekly Downloads Weaponized to Attack Developers
The latest wave of npm-centric phishing has taken a darker turn with the hijack of the ubiquitous is utility, a module pulled 2.8 million times…
Latest Cybersecurity News — Page 2089
View all →
Bulletproof Hosting Provider Powering Global Malware Campaigns
Security researchers may have discovered a reliable hosting company run by Qwins Ltd. that supports a broad range of international malware operations in a recent…
Tea Dating Advice app has users’ private messages disclosed
A few days after Tea Dating Advice discovered unauthorized access to one of its systems that leaked 72,000 user images, the popular mobile app faced…
FBI, CISA Warn About Scattered Spider Cyberattacks
The FBI and CISA issued updated guidance today on the Scattered Spider threat group, including information on recent attack techniques such as encrypting VMware ESXi…
CISA says it will release telecom security report sought by Sen. Wyden to lift hold on Plankey nomination
Sean Plankey’s path to leading the Cybersecurity and Infrastructure Security Agency might have one obstacle set to be cleared for removal. With the Senate Homeland…
Russian airline Aeroflot grounds dozens of flights after cyberattack
Aeroflot, Russia’s flag carrier, has suffered a cyberattack that resulted in the cancellation of more than 60 flights and severe delays on additional flights. Although official…
Want To Detect Incidents Before It’s Too Late? You Need Threat Intelligence
The difference between a minor security incident and a devastating breach often comes down to one critical factor: how quickly you can detect and respond…
Android Banking Malware Masquerades as Government Agencies to Attack Users
Cyble Research and Intelligence Labs (CRIL) has uncovered a sophisticated Android banking trojan dubbed RedHook, which disguises itself as legitimate applications from Vietnamese government and…
European Commission ignores calls to reassess Israel data adequacy
The European Commission (EC) has been ignoring calls to reassess Israel’s data adequacy status for over a year, despite “urgent concerns” about the country’s data…
Hackers leak images and comments from women dating safety app Tea
Hackers leak images and comments from women dating safety app Tea Pierluigi Paganini July 29, 2025 The dating safety app Tea was hacked, leaking images,…
How to identify the origin IP
Most of your targets often resort to using content delivery networks (CDNs) or other anti-DDoS reverse proxies to mask their origin IP, protecting the origin…
How attackers are still phishing “phishing-resistant” authentication
As awareness grows around many MFA methods being “phishable” (i.e. not phishing resistant), passwordless, FIDO2-based authentication methods (aka. passkeys) like YubiKeys, Okta FastPass, and Windows…