Dallas is looking for a third-party operator to take over day-to-day management of the Majestic Theatre, from event booking to financial oversight, as the city seeks to boost revenue at the historic ...

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

An entity connected to the former owner of one of the largest hotels in the Raleigh area has filed for bankruptcy.

ClickFix lures deliver the ChainScript RAT, which uses a Polygon smart contract to locate active WebSocket ...

The plaintiffs’ lawsuit took aim at Apple’s marketing of AI capabilities that were not in those iPhone models at the time.

Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.

A new ClickFix malware-as-a-service (MaaS) framework called Exvicy has been built on code lifted from a rival service, ErrTraffic.

Saudi Arabia continues to reroute more crude exports through the strategic waterway after Houthi attacks disrupted its East-West pipeline.

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

CrowdStrike links PhantomRaven malware to a bug bounty hunter, finding LLM-generated code, malicious npm packages and ...

Thirteen npm packages deliver WeaselBiscuit, a JavaScript stealer that harvests Chrome extension storage across Windows, macOS, and Linux.