DRILLAPP JavaScript backdoor targets Ukraine in Feb 2026, abusing Edge debugging features to spy via camera, microphone, and ...

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be the first documented case of attackers abusing the Deno JavaScript runtime ...

Powered by the TypesScript-native runtime Bun, Electrobun improves Electron with a smaller application footprint and built-in ...

Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and ...

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

OpenReel Video is an open-source browser video editor with no uploads, no accounts, and no watermarks. Here’s how it performs ...

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

You can plug in your phone, download an emulator, or install the Google Play Store to access Android apps on your computer.

Hackers have a new tool called ClickFix. The new attack vector combines fake human-verification prompts with malware, trying to trick users into running Terminal commands that bypass macOS security.

Attackers are using fake Claude Code install pages and malicious search ads to spread infostealer malware targeting Windows ...

GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a ...

All products featured here are independently selected by our editors and writers. If you buy something through links on our site, Mashable may earn an affiliate commission. Credit: Proton VPN Don't ...