"The threat actors have recently resorted to utilizing JSON storage services like JSON Keeper, JSONsilo, and npoint.io to ...

Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

Gootloader JavaScript malware, commonly used to deliver ransomware, is back in action after a period of reduced activity.

The economics of cybercrime have shifted dramatically. What once took skilled attackers weeks to reverse engineer can now be accomplished in hours using AI-powered analysis tools and automated systems ...

The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to appear authentic.

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...

The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...

Google's Threat Intelligence Group (GTIG) has identified a major shift this year, with adversaries leveraging artificial intelligence to deploy new malware families that integrate large language ...

Over the last month, Barracuda threat analysts have seen the following notable developments in email-based threats targeting ...

Web exposure management firm Reflectiz has announced raising $22 million in a Series B funding round that brings the total to $28 million.

The Gootloader malware scam, which was thought to have been disrupted and shut down in March 2025, has returned with both old ...