Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...

In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...

XWorm is a remote access trojan for Windows sold to criminals. See what it can take, how it gets in, what abuse.ch shows in ...

The Node.js I thought I had updated was actually still running an old version. The cause was that there were three versions ...

ClearFake hides on hacked websites and shows fake browser updates or fake CAPTCHA checks that install stealers. See how it ...

North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.

A PDF that arrives from outside the building is, as far as the parser is concerned, a program some stranger wrote. Inside ...

A breakdown of the Switch 2 jailbreak ns2jb, comparing the researcher's technical write-up with the released README. It ...

North Korean hackers linked to the Lazarus Group abused banking security software to deploy a layered malware toolkit against ...

Kaspersky's GReAT team has detailed Operation FlashHole, a Lazarus espionage campaign active since at least July 2025 that ...

Security researchers have published the first public proof-of-concept for CVE-2026-86950 , an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals.

Russian espionage group APT28 breached a naval shipbuilder in a NATO member state during an intrusion lasting at least two ...