2+ hour, 1+ min ago   (362+ words) A new campaign is abusing the npm ecosystem and its mirrors to host fake Cloudflare CAPTCHA pages, turning trusted developer infrastructure into a platform for phishing and potential ClickFix attacks. Researchers identified 24 npm packages containing identical malicious HTML. Each package…...

1+ day, 43+ min ago   (367+ words) Third-party analytics, advertising and marketing scripts are a routine part of modern websites, but Sucuri warns that every external tag, pixel, chat widget or embedded resource introduces another component that can access page content and communicate with outside services. The…...

5+ day, 22+ hour ago   (1116+ words) We tested Onerep's data removal service and found that it excels at finding and removing personal information from people-search sites. The sign-up process was quick and easy, and Onerep immediately started scanning sites for our personal data and sending opt-out…...

1+ week, 2+ hour ago   (315+ words) The Windchill Web Shell maps sensitive vault data, decrypts every credential in the Windchill keystore, and includes a custom Java class loader that allows additional code execution inside the application process, extending the shell into an unlimited backdoor. "This appears…...

1+ week, 5+ day ago   (498+ words) Jewelbug (also tracked as Earth Alux, REF7707, and CL-STA-0049), a China-based group, is running espionage and cryptocurrency fraud in parallel. The two missions are operated by the same small team, on shared infrastructure, from a single control panel, switching between them....

2+ week, 4+ day ago   (685+ words) Private Internet Access (PIA) received 19 legal requests between April and June 2026, but produced no VPN activity or connection logs in response, according to the company’s latest transparency report. The VPN provider published its Q2 2026 report on August 6, detailing the legal requests…...

2+ week, 5+ day ago   (373+ words) UNC6671 remained active after the apparent retirement of the BlackFile extortion brand, instead expanding its operations under several new names such as Redact, Pink, Helix, and Falcon, indicating that the same threat cluster is likely behind all five brands. Google Threat…...

3+ week, 1+ day ago   (395+ words) While the move allows Surfshark to devote more resources to its primary security offerings, it also means users who relied on Search will lose access to a dedicated private search experience over the coming months. According to Surfshark, the removal…...

3+ week, 1+ day ago   (260+ words) A WhatsApp account takeover scam that seizes full control of accounts without cracking a single credential. A Malwarebytes analysis draws on anonymized submissions to Malwarebytes Scam Guard, where WhatsApp now ranks as the third most common scam delivery channel, behind…...

4+ week, 6+ hour ago   (463+ words) At the time of publication, none of the three agencies had publicly responded to the letter. The proposal asks CISA to issue a Binding Operational Directive requiring all federal civilian agencies to remove legacy VPN appliances that are directly accessible…...