148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

July 14, 2026 at 12:38PM A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a dis…

Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths

July 14, 2026 at 11:49AM Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walk…

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

July 13, 2026 at 11:06PM Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's ca…

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

July 13, 2026 at 10:47PM Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million …

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

July 13, 2026 at 04:32PM Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-co…

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

July 13, 2026 at 01:00PM An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a publ…

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

July 13, 2026 at 11:06AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security…

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

July 11, 2026 at 11:19PM Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several P…

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

July 11, 2026 at 12:15PM Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the C…

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

July 10, 2026 at 10:00PM Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zo…

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks

July 10, 2026 at 01:40PM A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in p…

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

July 9, 2026 at 11:38PM Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is…