Mobile Security & Privacy State-Sponsored Cyber Espionage Campaign Targets Central Asian Diplomats with Sophisticated UEFI Bootkit October 23, 2026 Reynand Wu Diplomatic organizations operating across Central Asia have become the primary targets of a highly sophisticated and stealthy Unified Extensible Firmware Interface bootkit known as BlackX. According to a technical report…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Attack Campaign October 18, 2026 Nana Muazin Cybersecurity researchers have uncovered a malicious npm package disguised as a utility library, marking the latest escalation in a sophisticated and long-running software supply chain campaign tracked under the codename…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Campaign October 18, 2026 Suro Senen Cybersecurity researchers have uncovered a malicious npm package disguised as an image decoding utility, marking the latest evolution in an ongoing software supply chain attack campaign tracked under the codename…
Mobile Security & Privacy Malicious "imgdecode" npm Package Discovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Neng Nana Cybersecurity researchers have uncovered a newly identified malicious npm package actively circulating within the open-source software ecosystem. The package is the latest weapon in a persistent and evolving software supply…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Evan Lee Salim Cybersecurity researchers have uncovered a newly identified malicious npm package actively targeting Windows environments as part of an ongoing, sophisticated software supply chain attack campaign designated under the codename MALFEX.…
Mobile Security & Privacy Major Open-Source Maintainer Accounts Compromised in Renewed "GhostAction" Supply Chain Attack Campaign October 10, 2026 Pevita Pearce Cybersecurity researchers have issued urgent warnings regarding an ongoing, highly sophisticated credential-theft campaign that has successfully compromised high-profile open-source maintainer accounts to covertly inject malicious automated workflows into hundreds of…
Mobile Security & Privacy GhostAction Campaign Strikes Again: High-Profile Open-Source Accounts Compromised to Push Malicious GitHub Workflows October 9, 2026 Ali Ikhwan Cybersecurity researchers have uncovered alarming new details regarding an ongoing credential-theft campaign known as GhostAction, which has successfully compromised high-profile open-source maintainer accounts to propagate malicious workflows across tens of…
Mobile Security & Privacy International Law Enforcement Exposes Sophisticated Cyber Espionage Campaign Linked to Chinese Firm October 9, 2026 Suro Senen An international coalition of law enforcement and cybersecurity agencies has issued a sweeping joint advisory detailing a multi-year cyber espionage campaign targeting critical infrastructure, government organizations, law enforcement agencies, healthcare…
Mobile Security & Privacy International Law Enforcement and Intelligence Agencies Expose Sophisticated Cyber Espionage Campaign Linked to Chinese Firm October 8, 2026 Nana Law enforcement and intelligence agencies across seven countries have issued a sweeping joint advisory detailing an extensive, multi-year cyber espionage campaign orchestrated by hackers tied to a prominent Chinese cybersecurity…
Mobile Gaming & Esports Safe In Our World Launches ‘Four Billion Gamers’ Campaign to Improve Player Mental Health Support October 8, 2026 Basiran Mental health charity Safe In Our World has officially launched "Four Billion Gamers," a brand-new global campaign calling on video game companies worldwide to make mental health support much easier…
