CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Ethereum smart contracts are being used to download malware via poisoned NPM packages, something Binance has linked to DPRK ...

Hackers are increasingly using a new AI-powered offensive security framework called HexStrike-AI in real attacks to exploit ...

CISA warned that a critical vulnerability (CVE-2020-24363) in TP-Link TL-WA855RE Wi-Fi range extenders is being exploited in attacks.

Security researchers found malware packages using the Ethereum blockchain to conceal malicious commands on GitHub repos.