The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless malware attacks that evade detection.

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

If you're considering PuppeteerSharp for PDF generation, here's the version of the story that doesn't show up in the "getting started" docs.

Fortinet says the Ousaban trojan uses geofenced phishing PDFs and steganography to steal banking credentials from users in Spain and Portugal.

Securonix says PureLogs infection starts with a fake PDF JavaScript file and uses PowerShell, fileless .NET loading, and LOLBins.

Fortinet says the May 2026 Ousaban campaign uses PDF lures, geofencing, and steganography to target Windows banking users.

Google Chrome has continued to add to its PDF functionality since the feature debuted in 2010, creating an ecosystem that ...

Microsoft says these 119 malicious extensions were downloaded a total of 2.6 million times since 2021.

While Windows allows users to download files from almost anywhere, it can also block websites or downloads for various reasons. Windows 11, like its predecessors, comes with built-in security features ...