A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...

Fake Antigravity downloads are enabling fast account takeovers using hidden malware and stolen session cookies.

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

A growing range of native macOS features are being repurposed by attackers to execute code, move laterally and evade ...

North Korean hackers used AppleScript and ClickFix in recent attacks targeting macOS systems at financial organizations.