In June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being delivered ...

Security researchers have uncovered a new remote access trojan named SloppyRAT that may help ransomware operators gain an ...

Ring TAKE encryption aims to preserve AI-powered video features while reducing how long Ring retains access to video encryption keys. Image: RING/Amazon Ring’s new TAKE encryption limits video-key ...

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...

Ring has a new way to protect your videos. It’s developed an encryption method called TAKE, short for Throw Away the Key Encryption, that the Amazon-owned company says will protect your videos without ...

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, ...

Microsoft warns of TerminalFix, a campaign abusing compromised sites with fake Cloudflare CAPTCHAs Victims paste malicious PowerShell commands, sideloading DLLs and deploying a Python implant Implant ...

Explore the latest news, real-world incidents, expert analysis, and trends in malvertising — only on The Hacker News, the ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities.

A new npm supply chain campaign is hiding malware inside ordinary JavaScript package code instead of using the usual ...

In this article, we'll go over the basics of shared Bitcoin wallets, also known as multisig (multiple signature) wallets. We'll cover their advantages and disadvantages, how they work, how to set one ...