Security researchers have discovered EDR-Freeze, a sophisticated new attack method that can disable endpoint detection and response (EDR) tools and antivirus software without requiring kernel-level access. Unlike traditional attacks that rely on vulnerable drivers, EDR-Freeze operates enti...
Cybercriminals are targeting Mac users through a sophisticated campaign using fake GitHub repositories that impersonate over 100 legitimate software products like LastPass, 1Password, and Adobe After Effects. The attack distributes AMOS info-stealing malware via malicious applications opti...
Google has released emergency Chrome security updates to fix four vulnerabilities, including CVE-2025-10585, a critical zero-day flaw in the V8 JavaScript engine that cybercriminals are actively exploiting. This type confusion vulnerability can lead to arbitrary code execution, system comp...
The Python Software Foundation successfully thwarted the GhostAction supply chain attack by invalidating all stolen PyPI tokens before attackers could distribute malicious software. Discovered in September by GitGuardian, the attack compromised over 3,300 secrets across multiple platforms ...
Google has patched CVE-2025-10585, the sixth actively exploited Chrome zero-day vulnerability of 2025, affecting the V8 JavaScript engine with a type confusion flaw. The high-severity vulnerability is being used in real-world attacks, likely targeting high-risk individuals including politi...
