A .NET-based infostealer sold as part of a commercial cybercrime toolkit that bundles a stealer, crypter and remote access tool (RAT) under subscription tiers has been detailed further by cybersecurity researchers. The malware, known as Phantom Stealer, collects browser credentials,… Read More "Phantom Project Bundles Infostealer, Crypter and RAT For Sale"
Ideally, Janca said, developers should harden their build environment, so they don’t ship debug information/features with production. She offered these tips to developers: disable source maps in the build/bundler tool; add the .maps file to the .npmignore / package.json files… Read More "Anthropic employee error exposes Claude Code source"
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan 31 Mar 2026 As March 2026 draws to a close, ESET Chief Security Evangelist Tony Anscombe looks… Read More "This month in security with Tony Anscombe – March 2026 edition"
A Maryland man has been charged with stealing more than $53m after allegedly hacking the Uranium Finance cryptocurrency exchange twice in 2021 and laundering the proceeds through a crypto mixer. Jonathan Spalletta, 36, appeared in court after surrendering to law… Read More "Maryland Man Charged Over $53m Uranium Finance Crypto Hack"
Last week, DarkSword was then posted to open source code repository GitHub, making it all the more accessible. Security firms Malfors and Proofpoint soon after warned that another Russian hacker group linked to the Kremlin’s FSB intelligence agency was sending… Read More "Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool"
Unified Visibility Across Cloud Environments Centralized view of configurations, workloads, APIs, and data across multi-cloud environments. Prevents blind spots and helps correlate misconfigurations with active threats faster. Check dashboard clarity, correlation capability, and reporting visibility for leadership. Cloud Native Data… Read More "Fidelis CNAPP Features Explained: Strengthening Cloud Security"
The attack follows a series of supply chain attacks that impacted multiple open-source projects across different package repositories over the past several weeks, most of them attributed to a group known as TeamPCP. However, the Google Threat Intelligence Group (GTIG)… Read More "Attackers trojanize Axios HTTP library in highest-impact npm supply chain attack"
Iran’s Islamic Revolutionary Guard Corps warned Tuesday that it plans to begin attacking more than a dozen American companies across the Middle East on Wednesday in retaliation for the killing of Iranian citizens in the ongoing war with the US… Read More "Iran Threatens to Start Attacking Major US Tech Firms on April 1"
Cloud environments don’t follow the same rules traditional data centers did. Workloads spin up in seconds, containers live and die within a single request cycle, serverless functions execute without a persistent footprint, and infrastructure scales faster than any manual security… Read More "Behavioral Analysis in Cloud Workload Protection: Why Runtime Detection Is Now Mandatory"
A large-scale loan phishing operation in Peru has been uncovered, showing how cybercriminals are abusing fake loan applications to steal valid card numbers and PIN codes from unsuspecting users. Active since 2024, the campaign impersonates well-known financial institutions and relies… Read More "Peruvian Loan Scam Harvests Cards and PINs via Fake Applications"
