A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...

As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not ...

Hackers injected credential-stealing malware into the Bitwarden CLI tool via a supply chain attack on the NPM package, ...

A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

The compromise of a version of Bitwarden's CLI is connected to the ongoing Checkmarx supply chain campaign, but differences in the operational methods of both incidents are making it difficult to ...

A malicious version of the Bitwarden command-line interface (CLI) password manager was briefly distributed via the Node ...

One victim thought she was buying a tractor that could help a man pay medical bills. But no, fraudsters hacked someone else's ...

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.

A new LOTUSLITE malware campaign is targeting India’s banking sector using phishing files and trusted tools. Researchers say ...

Updated LOTUSLITE targets India banking sector via CHM and DLL side-loading, expanding espionage campaign to South Korea and ...

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...