The open-source text editor Notepad++ — trusted by developers worldwide — was compromised in a highly-targeted supply-chain attack lasting six months in 2025. Rather than exploiting a software bug in Notepad++ itself, threat actors hijacked its update delivery infrastructure, allowing them to deliver malicious payloads…
Continue reading...
In mid-June 2025, researchers from Zimperium zLabs disclosed a concerning development of the Android banking Trojan known as Godfather. Its latest version leverages an advanced on-device virtualization technique to take over legitimate banking apps, enabling the theft of authentication data and even the initiation of…
Continue reading...
Researchers at Aikido Security uncovered a sophisticated supply‑chain malware operation that compromised at least 16 popular packages in the npm and PyPI ecosystems, affecting nearly 1,000,000 weekly downloads. In recent years, open‑source package ecosystems (npm, PyPI, RubyGems, etc.) have become a “highway” for attackers into…
Continue reading...
A malicious Python package named “disgrasya” has been discovered on Python Package Index (PyPI), used as a tool for credit card fraud. This package exploited the WooCommerce API to automate stolen card verification and reached over 34,000 downloads, highlighting a serious and widespread threat in…
Continue reading...
In a significant development, cybersecurity researchers have uncovered that MirrorFace, a threat actor group linked to China, has broadened its cyber espionage activities beyond its traditional focus on Japan. Recent findings indicate that the group targeted a diplomatic organization in the European Union, marking a…
Continue reading...
