Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from ...

Learn why modern SaaS platforms are adopting passwordless authentication to improve security, user experience, and reduce breach risks.

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites | Read more hacking news on The Hacker News ...

Infosecurity has selected five of the most significant vulnerability exploitation campaigns of 2025 that led to major ...

Hackers exploit a critical React JavaScript vulnerability, CVE-2025-55182, to deploy crypto wallet drainers on legitimate websites ...

"I felt like my head was going to explode then surprisingly it actually did," said Dr Hard, from Rudry near Caerphilly. She ...

Apple today released a new update for Safari Technology Preview, the experimental browser that was first introduced in March ...

The malicious fork, named ‘lotusbail’ has all the same functionality as the legitimate project, but it also steals WhatsApp authentication tokens and session keys. Furthermore, it intercepts and ...

A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate ...

Phishing attacks in 2025 increasingly moved beyond email, with attackers using social platforms, search ads, and ...

Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain ...