CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control (C2) channels associated with GlassWorm, a persistent software chain campaign targeting software developers through malicious packages and extensions.
“Since at least early 2025, GlassWorm operators have systematically targeted software developers, a
SOURCE:
Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities. According to
Latin America and Europe become the target of two banking trojan campaigns that are designed to infect Windows and Android
Most organizations still picture cyber defense as a fortress problem: build stronger walls, add more guards, buy another detection engine.