Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a...
Cybersecurity
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
Ravie LakshmananJun 26, 2026Vulnerability / Software Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical...
Hackers Claim French Employment Leak Exposes Over 1M Records, Health Data
A data leak claim tied to French employment services could reach into some of the most personal parts of a...
New License Plate Reader Tech Could Track Phones, AirPods, and Smartwatches
Roadside cameras are no longer just watching cars. Your device is next in line. Defense contractor Leonardo has begun marketing...
Microsoft Extends Windows 10 Security Updates to 2027
Windows 10 users just got more breathing room. Microsoft has extended its Windows 10 Extended Security Updates program for personal...
Five Eyes Warns AI Could Speed Cyberattacks Within Months
Cyber agencies from the Five Eyes intelligence-sharing alliance — Australia, Canada, New Zealand, the UK, and the US — warned...
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades...
Denmark Ordered to Pay $12M Over Huawei Equipment Removal
Denmark’s push to secure telecom infrastructure now comes with a price tag. A Danish court has ordered the state to...
Interpol: Cybercrime Hits 30% of Recorded Crime in Surveyed APAC Countries
Cybercrime is taking up a larger share of police caseloads across parts of Asia and the South Pacific, and Interpol...
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
Ravie LakshmananJun 25, 2026Hacking News / Cybersecurity News It’s dumb out there again. This week has the usual smell of...
Europol, Microsoft Hit Malware Network Behind 27M Stolen Logins, 140,000 Infected Computers
Europol, Microsoft, and international partners have disrupted a global malware network after investigators recovered 27 million stolen login credentials and...
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
Ravie LakshmananJun 24, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active...
Healthcare Vendor Xsolis Reports Breach Affecting 1.4M People
Nearly 1.4 million people are affected by a healthcare data breach involving Xsolis, a technology vendor that helps hospitals and...
Apple’s £3B iCloud Lawsuit Could Affect 40M UK Users
Apple’s grip on iCloud is heading for a courtroom test. A UK Competition Appeal Tribunal (CAT) has cleared a £3...
LastPass Confirms Vendor Breach Exposed Customer Contact, Support Data
A third-party vendor breach has once again pulled LastPass into a cybersecurity incident, exposing customer contact and support data in...
