Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

UNC6692 relies on email bombing and social engineering to infect victims with Snow malware: Snowbelt, Snowglaze, and ...

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.

Companies like Lovable, Base44, Replit, and Netlify use AI to let anyone build a web app in seconds—and in thousands of cases ...

The canary trap is a simple tool often used to identify leakers or double agents. To make one, you simply share a document, ...

How indirect prompt injection attacks on AI work - and 6 ways to shut them down ...

Amtrak data breach exposes over 2.1 million customer records after CRM access. Learn what was leaked, risks, and steps users ...

No, taping over your webcam isn't going to cut it. From VPNs to tracker blockers, here's how to stay safe online while ...

Home » Security Bloggers Network » Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework The post Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude ...

A data breach is a cyberattack, although not all cyberattacks are data breaches. A good example of this is a distributed ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...