SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

Alexander Hagenah previously exposed issues affecting Windows Recall with his TotalRecall tool, prompting Microsoft to ...

North Korea's Lazarus Group has launched advanced malware targeting macOS devices. Mach-O Man, as it is called, is designed ...

The team behind in-process OLAP database DuckDB has put forward a solution to the "small changes" problem that they say ...

New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.

Microsoft vowed that its controversial Windows Recall feature was finally locked down. A cybersecurity researcher has ...

This new Storm attack platform can exfiltrate passwords and session data, enabling 2FA bypass. Google Chrome, Microsoft Edge ...

France is replacing 2.5 million Windows desktops with Linux - and I mapped out its new stack ...

IntroductionIn February 2022, BlackBasta emerged as a successor to Conti ransomware and quickly rose to prominence. BlackBasta was operational for three years until February 2025 when their internal ...

Mozilla, the company behind Firefox and Thunderbird, introduces its own take AI model with places privacy front and center ...

Microsoft on Wednesday forecast that sales at its Azure cloud business would beat Wall Street estimates, and the software ...

Despite the lingering perception that no one really uses Copilot, Microsoft said on Wednesday that the number of users and ...