How modern infostealers target macOS systems, leverage Python‑based stealers, and abuse trusted platforms and utilities to distribute credential‑stealing payloads.
The threat situation in the software supply chain is intensifying. Securing it belongs at the top of the CISO’s agenda.
Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native to deliver malicious payloads for Windows and Linux.
OpenClaw patched a critical vulnerability that could be exploited to hijack the increasingly popular AI assistant.
Threat actors are exploiting the Metro4Shell React Native vulnerability to deploy malware on Linux and Windows systems.
Too slow react-ion time Baddies are exploiting a critical bug in React Native's Metro development server to deliver malware ...
A security researcher found 386 malicious ‘skills’ published on ClawHub, a skill repository for the popular OpenClaw AI assistant project ...
AWS patched a critical CodeBuild flaw that risked GitHub repository hijacking and potential supply chain attacks via the AWS Management Console..