npm Package With 206K Downloads Steals GitHub Tokens
On November 7, Veracode researchers found a dangerous typosquatting attack targeting developers who use GitHub Actions. A fake npm package called โ@acitons/artifactโ had already reached 206,000 downloads before it was [...]
Lite XL Text Editor Vulnerability Allows Remote Code Execution
A new vulnerability has been discovered in Lite XL, a lightweight open-source text editor, that could let attackers run arbitrary code on affected systems. Researchers from Carnegie Mellon University identified [...]
New Phishing Trick Hits People Who Lost Their iPhones
A new phishing scam is targeting iPhone users who have lost their devices, taking advantage of their hope to recover them. The goal: to steal Apple ID credentials. According to [...]
DarkComet RAT Hides Behind Fake Bitcoin Tools
A newly discovered malware campaign is leveraging one of cybercriminalsโ most effective lures cryptocurrency to distribute DarkComet RAT. This notorious remote access trojan continues to plague users despite being discontinued [...]
๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐ฃ๐ฎ๐๐ฐ๐ต ๐ง๐๐ฒ๐๐ฑ๐ฎ๐ โ ๐๐ฟ๐ถ๐๐ถ๐ฐ๐ฎ๐น ๐ฌ-๐ฑ๐ฎ๐ ๐ฃ๐ฎ๐๐ฐ๐ต + ๐ ๐ฎ๐ท๐ผ๐ฟ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐๐ถ๐ ๐ฒ๐
Microsoft has released its November 2025 Patch Tuesday update, fixing 63 security vulnerabilities across its products. One of the most serious issues is a zero-day vulnerability in the Windows Kernel [...]