BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Fake alerts about Adobe and Zoom trick users into installing remote access software that gives attackers control of infected devices ...

Filters don't stop prompt injection; architecture does. A field guide to the lethal trifecta, the rule of two, Dual-LLM and ...

A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.

Spread the loveWhen you’re dealing with a lot of files, whether you’re uploading a new website, backing up critical data, or ...

Spread the loveChoosing the right code editor is a bit like a chef selecting their knives: it’s a deeply personal decision ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

One of the many reasons The X-Files ranks among the most beloved genre shows of all time is that it wasn’t afraid to be weird. It wasn’t afraid to be scary. But, for its second trip to the big screen, ...

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

Coming this summer is a Lego set that every The X-Files fan would give up their liver for. Lego announced Tuesday that a new official set based on The X-Files will arrive this August. The official ...