A Compromised Admin Account Put the Shai-Hulud Worm Into AI Sandbox Maker Tensorlake’s npm SDK
A poisoned Tensorlake SDK release reached npm through the...
Browse Tag
Malware
11 Articles
How to Catch a Malicious Python Package at Import Time With Audit Hooks
Build a small monitor on sys.addaudithook that imports a package...
Carbonato Turns an Unmodified Open-Source AI Agent Into a Docker Botnet’s Operator Console
ThreatDown found a Docker-hijacking botnet that runs on an...
Wordfence’s Mu-Plugin Discovery Turns a Blockchain Into a Takedown-Resistant Command Post
Wordfence found a WordPress backdoor that rebuilds itself after...
Cisco Talos’s CLOSEDQUORUM Turns Command and Control Into a Vote Among Four Chatbots
Cisco Talos found the first malware with no dedicated command...
ChainDrop Worm Infected Over 400 npm Packages While Leaving Their Source Code Clean
A worm called ChainDrop hijacked a maintainer's GitHub account...
Google Chrome Moves to Block New Tab Hijacker Extensions by Default
Google is building a Chrome fix for malware that abuses...
Volexity Details a SonicWall Zero-Day Chain That Handed Attackers Root Access
A threat actor chained two SonicWall SMA zero-days for weeks...
Kaspersky Details HelloNet Campaign Abusing ViPNet Updates in Russia
Kaspersky says a campaign called HelloNet is abusing the ViPNet...
Microsoft Warns of a Surge in ACR Stealer Attacks on Enterprise Customers
Microsoft found a surge in ACR Stealer attacks on enterprise...