Opera GX patched a flaw that let malicious sites silently install GX Mods and leak a signed-in user’s Gmail address with CSS.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers ...

Microsoft says hotel phishing emails are using Calendly links and photo ZIP files to drop the TonRAT Node.js implant on front ...

Days after IBM and Red Hat announced a master security plan for open-source software, Red Hat suffers a major breach of its ...

Hikers along Southern California's Pacific Crest Trail have been smacked with fast-spreading cases of a "winter vomiting disease" – and they aren't the only ones. At least two dozen hikers have fallen ...

Flu season may be mostly behind us, but a nasty, highly contagious stomach bug is rising. Limited time: Save 25% on NBC News subscription Get exclusive reporting, live Q&As and ad-free reading. In ...

After days landscaping around his Shirley home in May 2021, Michael Larkin noticed two ticks on his thigh. Then came the punishing headaches, rash, high fevers, and night sweats, followed by a ...

The types of Ebola and hantavirus worrying officials are very different from the species identified decades ago, raising new questions about how to respond. By Carl Zimmer This month, a pair of ...

An unpatched SQL injection vulnerability in the Ghost content management system has been weaponized in an active, large-scale cyberattack that has compromised more than 700 websites worldwide — ...