Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
Ravie LakshmananMay 19, 2026Software Security / Malware In [...]
TeamPCP Supply Chain Campaign: Activity Through 2026-05-17
Since the last update, the TeamPCP supply chain campaign [...]
Fresh mischief and digital shenanigans
This blogpost covers newly discovered activities attributed to [...]
Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access
Ravie LakshmananMay 15, 2026Botnet / Threat Intelligence The [...]
ScarCruft compromises gaming platform in a supply-chain attack
ESET researchers uncovered a multiplatform supply-chain attack by [...]
How CallPhantom tricks Android users
There’s an app for everything nowadays… right? Well, [...]
Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories
Ravie LakshmananMay 07, 2026Hacking News / Cybersecurity News [...]
OceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI
Introduction Through our daily threat hunting, we noticed [...]
Meta sees everything, Copy Fail, and a deepfake gets hired • Graham Cluley
Unknown So these employees, they're drawing little boxes [...]
DarkSword Malware – Schneier on Security
DarkSword Malware DarkSword is a sophisticated piece of [...]