Lazarus Group Uses npm Brandjacking Campaign to Target Developers
A new npm campaign linked to North Korea’s Lazarus Group shows how attackers are using familiar-looking package names to gain access to developers’ systems and…
Latest Cybersecurity News — Page 583
View all →
Scam Compound Trafficking Victim To Cybercrime Whistleblower: Mohammad Muzahir’s Story
04 Jun Scam Compound Trafficking Victim To Cybercrime Whistleblower: Mohammad Muzahir’s Story Posted at 08:43h in Blogs by Taylor Fox This week in cybersecurity from…
OAuth marketplace apps keep access after publishers vanish
Installing an app from the Google Workspace Marketplace or GitHub Marketplace can grant a third party access to company email, files, calendars, code repositories, CI…
Travel scams are everywhere. Here’s how to avoid them
Planning a holiday should be exciting, fun, and not a cybersecurity risk. But booking flights, hotels, and rental properties often means sharing sensitive personal and…
China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa
Ravie LakshmananJun 04, 2026Malware / Cybercrime A new China-linked cybercrime group known as TA4922 has expanded its targeting focus to target European organizations in the…
Interview: Clare Hickie, EMEA CTO, Workday
Clare Hickie, chief technology officer (CTO) for EMEA at Workday, sits in the Customer Experience Centre in the technology firm’s European headquarters in Dublin and…
NCSC Releases Software Supply Chain Attacks Guidance
In May 2026, malicious code appeared inside packages used across NHS software projects. The software supply chain attack named Mini Shai-hulud by researchers spread through…
AI-Powered Bots Create Governance Challenges
For years, security teams have relied on behavioral clues to identify malicious activity. However, the rise of AI-powered bots is making that task far more…
Fujifilm: Turning AI ambition into practical business value
One of the biggest challenges with scaling AI is that the term itself has become too vague to be useful. When AI is discussed as…
Mirasvit Vulnerability Exploited to Execute Code on Magento Servers
The US cybersecurity agency CISA on Wednesday urged federal agencies to immediately patch a critical-severity vulnerability in the Mirasvit Full Page Cache Warmer for Magento…
Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian Targets
Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian Targets Pierluigi Paganini June 04, 2026 Gamaredon exploits a WinRAR flaw to drop modular,…
Lessons for life: Why children’s data is a long-term identity risk
Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe. 03 Jun 2026…