Cybersecurity researchers have flagged a new set of 175 malicious packages on the npm registry that have been used to facilitate credential harvesting attacks as part of an unusual campaign.

Other noteworthy stories that might have slipped under the radar: US universities targeted by payroll pirates, Zimbra ...

At least 70,000 government IDs used for age assurance exposed in third-party support breach impacting Discord users around ...

Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.

Update Chromium-based browsers to the patched Chrome/Edge/Opera builds and relaunch them. A non-updated browser stays ...