Malicious Terraform providers and Go modules deliver Graphalgo-linked Go malware using blockchain and Slack for command and ...

"I save invoices received from clients in Gmail to specific client folders in Google Drive every time," or "I want to read the email body to determine if it's an estimate, contract, or report and sort ...

I love games. My life as a gamer began with fighting friends in Super Mario Bros. I chose a path in the sciences, but instead of my dream of joining a game company, I ended up in the IT industry. Even ...

ClickFix lures deliver the ChainScript RAT, which uses a Polygon smart contract to locate active WebSocket ...

The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake ...

The Swift Package Manager (SwiftPM), created by Apple in 2015, is a command line automation and dependency management tool.

The WaterPlum group posed as tech recruiters to trick developers into downloading malware, stealing funds from more than ...

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

Tehran said it has discovered that the United States is planning strikes on Iran - warning this will trigger retaliation.

Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.

WordPress Click2Shell vulnerability lets attackers silently install themes on any admin’s site via a single crafted link, ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...