A self-propagating supply chain attack has compromised at least 187 npm packages, beginning with the popular @ctrl/tinycolor library, which receives [...]

Google has confirmed that cybercriminals created a fraudulent account within its Law Enforcement Request System (LERS), a platform used by [...]

A new phishing-as-a-service platform named VoidProxy is targeting Microsoft 365 and Google accounts, even when protected by third-party single sign-on [...]

A threat actor known as WhiteCobra is distributing fraudulent extensions across the Visual Studio Marketplace and OpenVSX registry, targeting developers [...]

A recently identified ransomware variant, named HybridPetya, mimics the behavior of the infamous Petya/NotPetya malware but adds the capability to [...]

Microsoft has eliminated the registration fee for individual developers who want to publish their applications on the Microsoft Store. This [...]