MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon - Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX . The package, named " imgdecode ," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded...
7 Best Real Estate Data Providers in 2026 - ATTOM, Cotality, CoStar, RentCast, Datafiniti, PropertyData and Zenrows compared on data depth, coverage, refresh, delivery, formats and pricing, with a use-case table and a buy-or-collect guide.
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor - Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run...
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers - The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper...
Analyzing 2026's most prevalent browser attack techniques - 4 in 5 ClickFix attacks are reached via search engine results. 30+ criminal device code phishing kits in the wild, up from zero last year. 90% of phishing kits generated with the help of AI. Phishing domains active for an average of 2 days before being rotated for a fresh one.
Critical BlockStrap flaw lets hackers run code on Magento servers - Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.
Chrome Beta for Desktop Update - The Chrome team is excited to announce the promotion of Chrome 157 to the Beta channel for Windows, Mac and Linux. Chrome 157.0.8103.6 contains our usual under-the-hood performance and stability tweaks, but there are also some cool new features to explore - please head to the Chromium blog to learn more!...
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams - A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka , which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed to be active since at least 2017, offering PHP code templates to partners and...
UK Legal Aid Agency: Hackers stole records dating back to 1978 - The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978.
