This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

A new macOS malware named ClickLock Stealer leverages social engineering and process killing to bypass the operating system’s ...

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

Vulnerabilities in remote monitoring and management (RMM) tools can give attackers a direct path into enterprise environments, often with the same trusted access that IT administrators rely on to ...

A loose collective of cybercriminals initially took credit for crippling Jaguar Land Rover last year. Investigators now see Russian hands behind the ransomware attack. By Adam Goldman Jane Bradley ...

Hackers drained roughly three million dollars from Polymarket users via a compromised vendor that injected malicious code into its frontend. Polymarket confirmed on Thursday that hackers stole funds ...

LastPass, a password manager maker, is informing customers of a recent security breach at third-party market intelligence platform Klue, and how it impacts its customers, according to a recent blog ...

One of the largest open-source package repositories just spent a weekend cleaning up after a malware campaign that did not break into anything. It did not need to. Attackers seized control of more ...

Add Yahoo as a preferred source to see more of our stories on Google. A screen displays the logo for Cigna Corp. on the floor at the New York Stock Exchange (NYSE) in New York, U.S., July 16, 2019.

June 12 (Reuters) - Cigna's (CI.N), opens new tab pharmacy benefits services unit Express Scripts requested on Friday that a federal court strike down a ‌Tennessee state law that it says would ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...