More

    Exploits

    Infostealer Malware Delivered in EmEditor Supply Chain Attack

    The ‘download’ button on the official EmEditor website served a malicious installer. 

    New ransomware methods emerge: ClickFix & group alliances

    Ransomware attack volumes fell slightly in November but security researchers observed a sharp rise in new methods and collaboration between criminal groups, according to...

    Shai-Hulud Returns With ‘Golden Path’ Malware In Latest NPM Attacks

    Just weeks after the devastating “Second Coming” campaign crippled thousands of development environments, the threat actor behind the Shai-Hulud worm has returned. Security researchers...

    The HoneyMyte APT now protects malware with a kernel-mode rootkit

    Overview of the attacks In mid-2025, we identified a malicious driver file on computer systems in Asia. The driver file is signed with an old,...

    A week in security (December 22

    Last week on Malwarebytes Labs: Pornhub tells users to expect sextortion emails after data exposure Hacktivists claim near-total Spotify music scrape Stay safe! We don’t just report on...

    Top Ransomware Attacks of 2025: Major incidents, impacts & rising Cyber Threats Globally

    Ransomware remained one of the most pervasive and damaging cyber threats in 2025, targeting organizations across industries, disrupting critical services, and exposing millions of...

    Security Bite: A note on the growing problem of Apple-notarized malware on macOS

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do....

    NPM package with 56,000 downloads compromises WhatsApp accounts

    Pierluigi Paganini December 27, 2025 Koi Security researchers warned that the NPM package ‘Lotusbail’, a WhatsApp Web API library and fork of ‘Baileys’, has...

    Everest Ransomware Group Claims Theft of Over 1TB of Chrysler Data

    On December 25, while much of the world was observing Christmas, the Everest ransomware group published a new post on its dark web leak...

    Latest articles