A supply chain attack compromised Laravel Lang localization packages by rewriting existing GitHub tags across four repositories rather than publishing [...]

Threat actors have been brute-forcing VPN credentials and bypassing multi-factor authentication on SonicWall Gen6 SSL-VPN appliances by exploiting CVE-2024-12802, with [...]

A threat actor using the account deadcode09284814 has published four malicious npm packages containing the leaked Shai-Hulud malware, which steals [...]

A researcher known as Chaotic Eclipse has released a proof-of-concept exploit for a Windows privilege escalation zero-day called MiniPlasma, which [...]