Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive…
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials
Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor known…
The Hidden Cost of Cybersecurity Specialization: Losing Foundational Skills
î „The Hacker Newsî ‚Mar 24, 2026Security Operations / Network Security Cybersecurity has changed fast. Roles are more specialized, and tooling is more…
Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
î „Ravie Lakshmananî ‚Mar 24, 2026Vulnerability / Enterprise Security Citrix has released security updates to address two vulnerabilities in NetScaler ADC and…
U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage
î „Ravie Lakshmananî ‚Mar 24, 2026Cybercrime / Network Security A 26-year-old Russian citizen has been sentenced in the U.S. to 6.75 years…
North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware…
CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
î „Ravie Lakshmananî ‚Mar 23, 2026Cybersecurity / Hacking Another week, another reminder that the internet is still a mess. Systems people thought…
We Found Eight Attack Vectors Inside AWS Bedrock. Here’s What Attackers Can Do with Them
AWS Bedrock is Amazon’s platform for building AI-powered applications. It gives developers access to foundation models and the tools to…
Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware
î „Ravie Lakshmananî ‚Mar 23, 2026Email Security / Cloud Security Microsoft has warned of fresh campaigns that are capitalizing on the upcoming…
Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper
î „Ravie Lakshmananî ‚Mar 23, 2026Cloud Security / DevOps Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy…