A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...
Microsoft’s Digital Crimes Unit unsealed a civil lawsuit on May 19 in U.S. District Court for the Southern District of New ...
A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence ...
Microsoft announced May 19 that it disrupted operations of Fox Tempest, a threat actor operating as a ...
Microsoft disrupted Fox Tempest, a malware-signing service accused of abusing Azure certificates to disguise ransomware and ...
GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.
A new SecureBoot folder appeared in Windows 11 after May's update. Here's what it is, what it does, and why you shouldn't ...
Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other ...
A legacy Windows scripting utility tied to Internet Explorer is still being used in modern malware campaigns, researchers say ...