A watering hole attack poisons trusted sites to hit a chosen group. Learn how it works, the APT29 phone case, and practical ...

In November 2026, the Windows PC launcher for the popular game 'Goddess of Victory: NIKKE' was tampered with by a third party ...

APT29 used poisoned websites to attack unpatched iPhones and Android phones, stealing cookies, Wi-Fi passwords and device ...

Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service.

A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting ...

NIKKE was reportedly used to plant a remote-access tool on players' computers, according to analysis by players and an ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious Claude Code extension on Cursor exposed up to 5,000 developers to SSH backdoors. Here's what happened and what ...

Static analysis of a PDF email attachment using pdfid and pdf-parser to identify JavaScript, inspect OpenAction entries, and ...

A Brazilian Magecart group has compromised the checkout infrastructure of ecommerce platform Convertr, injecting a malicious ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...