Latest News
DPRK-Linked Hackers Use Ethereum Dead Drops in Malicious npm Packages
DPRK-linked hackers planted malicious code in 6 npm packages that use Ethereum transactions to locate attacker-controlled servers and download malware payloads.
Cold Wallets vs Hot Wallets: Which Is Safer?
Compare hot and cold crypto wallets, their security risks, convenience, and best uses to choose safer storage for trading or long-term digital assets with care.
Samsung Patched 176 App Flaws, Including Camera Recording and Data Theft Bugs
Oversecured details 176 patched vulnerabilities in Samsung phone apps that enabled camera recordings, screen capture, DNS hijacking, and theft of sensitive data.
Non-Custodial Crypto Payment Gateways: Why the Security Model Matters for Merchants
Disclosure: This article was prepared in collaboration with Bcon Global. The information provided here is based on their…
Fake Zoom Installer Targets Mac and Windows With Overlord RAT
A fake Zoom installer delivers Overlord RAT to macOS and Windows devices while installing the genuine Zoom app to make the infection appear legitimate to users.
Should Enterprises Stop Building Their Own Base Images?
Managed base images could reduce patching workloads and vulnerability backlogs while enterprises retain security and compliance controls through a hybrid model.
How Nonprofits Maximize Their Impact With Limited Budgets for Training
Nonprofits can stretch limited training budgets by reusing proven materials, choosing practical tools, supporting access, and measuring actual service outcomes.
XSS2Shell Vulnerability Puts 500 Million WordPress Sites at Risk of RCE
The XSS2Shell bug in WordPress could turn a failed login into server code execution after an attacker tricks a logged-in administrator; update to version 7.0.3.
Bugtraq Is Back: The Original Full Disclosure Mailing List Is Live Again
At DEF CON 34 in Las Vegas, security researcher Jonathan Brossard, known in the community as endrazine, announced the rebirth of the original Bugtraq mailing list.
Application security in 2026 is an exposure management problem
Explore how application security in 2026 uses continuous testing, API visibility, AI risk analysis, and exposure management to prioritize critical threats.