Google Threat Intelligence Group has discovered a zero-day exploit targeting an unidentified open-source web administration platform's two-factor authentication mechanism, noting [...]

A supply chain attack compromised Laravel Lang localization packages by rewriting existing GitHub tags across four repositories rather than publishing [...]

Threat actors have been brute-forcing VPN credentials and bypassing multi-factor authentication on SonicWall Gen6 SSL-VPN appliances by exploiting CVE-2024-12802, with [...]

A threat actor using the account deadcode09284814 has published four malicious npm packages containing the leaked Shai-Hulud malware, which steals [...]