Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 ...

Source Code Exfiltration in Google Antigravity‍TL;DR: We explored a known issue in Google Antigravity where attackers can silently exfiltrate proprietary source codeBy hiding malicious instructions ...

The Opencode Python library provides convenient access to the Opencode REST API from any Python 3.8+ application. The library includes type definitions for all request params and response fields, and ...

高等教育机构因其开放的网络架构、庞大的用户群体及高价值的科研数据，长期成为网络钓鱼攻击的重灾区。本文以多伦多大学（University of Toronto）2026年面临的严峻 phishing ...

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...

A sophisticated Python-based malware deployment uncovered during a fraud investigation has revealed a layered attack involving obfuscation, disposable infrastructure and commercial offensive tools.

There are moments in the evolution of a nation when a single incident, seemingly isolated, exposes a deeper and more troubling ...

North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT ...

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...

Researchers warn malicious packages can harvest secrets, weaponize CI systems, and spread across projects while carrying a ...

Safe coding is a collection of software design practices and patterns that allow for cost-effectively achieving a high degree ...