Track CVE vulnerabilities, run security tools, and stay informed with expert cybersecurity guides.
GlassWorm ForceMemo attack steals GitHub tokens via malicious VS Code extensions, then force-pushes malware into Python repos. Your password manager cannot protect code credentials — here is why you need a dedicated secrets vault and the 15-minute audit to do right now.
DRILLAPP turns Microsoft Edge into a surveillance tool using debug flags. Here are 6 browser security tools — from enterprise EDR to free Sysmon rules — that would have caught it.
Canada's Bill C-22 introduces mass metadata surveillance capabilities. A step-by-step guide to locking down your DNS, VPN, browser compartmentalization, and home network before similar legislation reaches your country.
Three ClickFix campaigns are using fake AI tool installers and malicious Google Ads to trick Mac users into pasting Terminal commands that install the MacSync infostealer. Here is a step-by-step guide to identifying and blocking these attacks.
Socket researchers discovered 72 new malicious Open VSX extensions in the GlassWorm campaign, now using transitive dependencies to deliver payloads through trusted extensions.
Iran-backed hacktivist group Handala claims to have wiped 200,000 Stryker devices across 61 countries in a devastating wiper attack linked to MOIS and Void Manticore.