This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless malware attacks that evade detection.

Privacy gets awkward when your hardware starts introducing itself to websites.

Modular by design, and supports tree-shaking. Aligns with the community API documentation. Supports Node environments (20 and above). Supports browsers. Ships with TypeScript support and types. Zero ...

Microsoft Defender Experts identified a coordinated developer-targeting campaign delivered through malicious repositories disguised as legitimate Next.js projects and technical assessment materials.

Cybersecurity researchers have disclosed a cross-site scripting (XSS) vulnerability in the web-based control panel used by operators of the StealC information stealer, allowing them to gather crucial ...

Newly discovered npm package 'fezbox' employs QR codes to retrieve cookie-stealing malware from the threat actor's server. The package, masquerading as a utility library, leverages this innovative ...

The HTTP protocol, the backbone of the web, is inherently stateless. This means that a web server doesn't inherently remember anything about a user between successive requests. To create dynamic and ...

GA4, MA tools, CV management, A/B test analysis, etc. // utils/userIdentifier.ts export const getOrCreateUserId = (): string => { const KEY = 'uid'; const existing ...

A Google Chrome Web Store campaign uses over 100 malicious browser extensions that mimic legitimate tools, such as VPNs, AI assistants, and crypto utilities, to steal browser cookies and execute ...