The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.

A seven-year malicious browser extension campaign infected 4.3 million Google Chrome and Microsoft Edge users with malware, ...

ShadyPanda abused browser extensions for seven years, turning 4.3M installs into a multi-phase surveillance and hijacking campaign.

The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a development and delivery pipeline to drop malware.

I deleted every major social app — Instagram, Facebook, X (you know, Twitter), Reddit, and TikTok — and replaced them with their Progressive Web App (PWA) alternatives. The goal was to add some ...

Collabora releases a new modern office suite for Linux desktops. Learn about its features, privacy benefits, and how to ...

"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...

Shai Hulud's automated and aggressive upgrade is spawning more than 1,000 malicious npm repositories every 30 minutes, ...

Researchers have discovered a new series of ClickFix attacks in which cybercriminals use a convincing fake Windows Update ...

Now, we're back with Opus 4.5. Anthropic, the company behind Claude claims, and I quote, "Our newest model, Claude Opus 4.5, is available today. It's intelligent, efficient, and the best model in the ...