Cybersecurity researchers have discovered a malicious package on the npm package registry that masquerades as a library for detecting vulnerabilities in Ethereum smart contracts but, in reality, drops an open-source remote access trojan called Quasar RAT onto developer systems.
The heavily obfuscated package, named ethereumvulncontracthandler, was published to npm on December 18, 2024, by a user

The Hacker News – ​Read More

Threat hunters have disclosed a new “widespread timing-based vulnerability class” that leverages a double-click sequence to facilitate clickjacking attacks and account takeovers in almost all major websites.
The technique has been codenamed DoubleClickjacking by security researcher Paulos Yibelo.
“Instead of relying on a single click, it takes advantage of a double-click sequence,” Yibelo said.

The Hacker News – ​Read More

Your messages going back years are likely still lurking online, potentially exposing sensitive information you forgot existed. But there’s no time like the present to do some digital decluttering.

Security Latest – ​Read More

The fast growing region has its own unique cyber issues — and it needs its own talent to fight them.

darkreading – ​Read More