Ken Underhill

A malicious npm package disguised as OpenClaw installs GhostClaw malware to steal developer credentials and sensitive data.

Attackers are using Microsoft Teams impersonation to deliver A0Backdoor malware.

Fake Claude Code install pages are spreading infostealer malware through malicious search ads.

A fake Chrome extension impersonating imToken redirects users to phishing pages to steal crypto wallet keys.

An AVideo flaw allows unauthenticated attackers to execute commands and take over streaming servers.

A fake CleanMyMac site tricks macOS users into installing SHub Stealer malware that steals credentials and crypto wallets.

A WordPress plugin flaw allows attackers to create administrator accounts and take over vulnerable sites.

The FBI arrested a suspect accused of stealing $46 million in cryptocurrency from U.S. Marshals Service holdings.

AWS disclosed vulnerabilities in its AWS-LC cryptographic library that could bypass certificate verification and expose timing weaknesses.

The FBI is investigating suspicious activity in systems used to manage surveillance and wiretap warrants.

The CyberProof 2026 report warns that cybercriminals are increasingly using stolen identities and AI to launch faster, more scalable attacks.

A new report finds AI is reshaping cybersecurity roles but failing to reduce workload and burnout among security leaders.