news

A newly identified advanced persistent threat (APT) group, believed to be operating from China, has been observed deploying sophisticated Go-based backdoors against Mongolian government systems. The group, dubbed GopherW

Software supply chain security firm Socket has uncovered a sophisticated attack targeting Checkmarx's official Docker Hub repository and associated developer tools, potentially exposing sensitive data. Published: 2026-04

A sophisticated supply chain attack is exploiting compromised npm packages to steal developer credentials and propagate itself across the open-source ecosystem, posing a significant risk to software development pipelines

A sophisticated threat actor known as Harvester has updated its arsenal with a new Linux variant of its GoGra backdoor, employing legitimate cloud services for command and control to evade detection. This development sig

A severe security flaw in Cohere AI's Terrarium sandbox could allow attackers to execute arbitrary code with root privileges, posing a significant risk to systems running untrusted code. The vulnerability, CVE-2026-5752,

A sophisticated malware variant, LOTUSLITE, has been updated by suspected Chinese state-sponsored actors to target India's financial sector and South Korean policy circles, shifting from previous espionage campaigns. Pub