A new NuGet typosquatting campaign pushes malicious packages that abuse Visual Studio's MSBuild integration to execute code and install malware stealthily. NuGet is an open-source package manager and ...

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...

A new phishing campaign is using specially crafted CSV text files to infect users' devices with the BazarBackdoor malware. A comma-separated values (CSV) file is a text file containing lines of text ...

Android makes it ridiculously convenient to get new apps; you only need to head to the Play Store, look up the app, and tap install. However, you cannot find every app on the official Google store ...