The purported ransomware attack did not encrypt files and used infrastructure tied to MuddyWater.

The Pheno plugin monitors active Phone Link connections to eavesdrop on texts and notifications.

Interview with Daniel dos Santos: Post-Quantum Cryptography and the Risks No One Is Talking About Post-quantum cryptography (PQC) is quickly shifting from theory to inevitability. In this segment, Daniel dos Santos, VP of Research at Forescout, explains why PQC isn’t the most immediate threat today—but still demands early attention as standards so...

The company detected about 8.3 billion email-based phishing threats between January and March.

Researchers revealed several “amateur” mistakes made in Windows, Linux and ESXi variants.

A new cluster of 73 extensions impersonating legitimate projects has been tied to the GlassWorm campaign.

Attack raised concerns because it was second one on a major medical device maker since the Iran war started.

The malicious extensions inject iframes to display phishing content and extract other data.

The uploader_client.exe command-line utility allows for rapid and granular data theft.

A self-propagating script was added to @automagik/genie and @pgserve packages.