Several ransomware groups have been spotted using a packer-as-a-service (PaaS) platform named Shanya to assist in EDR ...

Notepad++ version 8.8.9 was released to fix a security weakness in its WinGUp update tool after researchers and users ...

The ClickFix campaign disguises malware as legitimate Windows updates, using steganography to hide shellcode in PNG files and ...

Splunk for Windows has a high-severity flaw that lets local users escalate privileges through misconfigured file permissions.

Container image scanning has come a long way over the years, but it still comes with its own set of, often unique, challenges ...

In a nutshell, UBI is a small Rust program that installs binaries from GitHub or GitLab. Software developers don't just ...

First, the bad news: the CyberVolk 2.x (aka VolkLocker) ransomware-as-a-service operation that launched in late summer. It's ...

Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data ...

A new campaign involving 19 malicious Visual Studio Code extensions used a legitimate npm package to embed malware in ...

The developers of Notepad++ recently discovered an actively exploited vulnerability that enabled hackers to hijack the popular editor's automatic updater. Version 8.8.9 addresses the issue, but ...

Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

GoLand is also getting the same multi-agent feature as other JetBrains environments. Anthropic's Claude Agent is the first ...