Joyfill npm Credential Stealer Targets GitHub Tokens, Browser Passwords and Crypto Wallets
Malicious beta releases of the legitimate Joyfill npm packages @joyfill/components and @joyfill/layouts were published on July 28, 2026, carrying an advanced credential-stealing remote access...
Web3 Job Scam Uses Fake Camera Failure to Deliver Infostealer Malware
A newly uncovered Web3-focused job scam is leveraging fake application workflows to deliver cross-platform infostealer malware, targeting both macOS and Windows users with tailored...
Dysphoria’s Hybrid Blockchain and Relay Architecture Makes Botnet Takedowns Harder
Since Q1 2026, researchers at XLab have been tracking an aggressively evolving IoT botnet family dubbed “Dysphoria,” whose bot population is estimated at over...
Hackers Use Fake Claude Desktop and Bing Ads to Deliver SectopRAT to 29 Organizations
Affected endpoints showed unusual Defender exclusions, new persistence mechanisms, and outbound connections aligned with remote access and credential theft activity, leading analysts to treat...
GitHub Actions Abuse Exploits cPanel CVE-2026-41940 to Steal Server Credentials
GitHub Actions abuse is powering a large-scale attack campaign that exploits the cPanel CVE-2026-41940 authentication bypass to steal server credentials and other sensitive secrets...