The group is abusing trusted remote management and file transfer tools to deliver a Linux encryptor on Windows machines.

Ransomware hackers have been spotted running Linux encryptors in Windows in a bid to avoid detection by security tools, ...

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...

Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...

Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...

The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...

Or so I thought, until I encountered SysLinuxOS in the deep recesses of the Linux rabbit hole. Built on the stability champ ...

The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025, barring January, with the number of postings on ...

Learn what drop-in (.d) directories are in Linux and how they help manage configuration files safely. Keep main config files ...

Unlike mainstream cloud providers, Internxt uses zero-knowledge encryption, meaning only you hold the decryption keys.

An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.