Home

npm Package With 206K Downloads Steals GitHub Tokens

On November 7, Veracode researchers found a dangerous typosquatting attack targeting developers who use GitHub Actions. A fake npm package called โ€œ@acitons/artifactโ€ had already reached 206,000 downloads before it was [...]

Lite XL Text Editor Vulnerability Allows Remote Code Execution

A new vulnerability has been discovered in Lite XL, a lightweight open-source text editor, that could let attackers run arbitrary code on affected systems. Researchers from Carnegie Mellon University identified [...]

New Phishing Trick Hits People Who Lost Their iPhones

A new phishing scam is targeting iPhone users who have lost their devices, taking advantage of their hope to recover them. The goal: to steal Apple ID credentials. According to [...]

DarkComet RAT Hides Behind Fake Bitcoin Tools

A newly discovered malware campaign is leveraging one of cybercriminalsโ€™ most effective lures cryptocurrency to distribute DarkComet RAT. This notorious remote access trojan continues to plague users despite being discontinued [...]

๐— ๐—ถ๐—ฐ๐—ฟ๐—ผ๐˜€๐—ผ๐—ณ๐˜ ๐—ฃ๐—ฎ๐˜๐—ฐ๐—ต ๐—ง๐˜‚๐—ฒ๐˜€๐—ฑ๐—ฎ๐˜† โ€“ ๐—–๐—ฟ๐—ถ๐˜๐—ถ๐—ฐ๐—ฎ๐—น ๐Ÿฌ-๐—ฑ๐—ฎ๐˜† ๐—ฃ๐—ฎ๐˜๐—ฐ๐—ต + ๐— ๐—ฎ๐—ท๐—ผ๐—ฟ ๐—ฆ๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜† ๐—™๐—ถ๐˜…๐—ฒ๐˜€

Microsoft has released its November 2025 Patch Tuesday update, fixing 63 security vulnerabilities across its products. One of the most serious issues is a zero-day vulnerability in the Windows Kernel [...]

Subscribe to our newsletter to receive security tips everday!