An ongoing campaign steals developers’ secrets via fake Claude Code installers and other popular coding tools, according to ...

A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called Pheno that ...

The helper's sole function is to invoke the browser's IElevator2 COM interface, introduced in Chrome 144, to recover the ...

Attackers are dropping the CloudZ RAT and a fresh plug-in, Pheno, to hijack the Windows-based bridge between PCs and ...

The CloudZ Trojan steals data through Microsoft Phone Link. The campaign has been active since at least January 2026.  Follow ...

Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace ...

A previously undocumented .NET trojan and its companion Pheno plugin allow attackers to capture mobile authentication codes ...

CloudZ RAT exploits Phone Link since Jan 2026, stealing credentials and OTPs via Pheno plugin, bypassing 2FA protections.

The Standard Performance Evaluation Corporation (SPEC) is updating its most important benchmark after nine years: Following ...

A Windows malware toolkit has been observed stealing SMS messages and one-time passwords (OTPs) from victim machines by ...

A new version of CloudZ RAT uses a malicious plugin called Pheno to extract sensitive data from Windows PCs by abusing ...

Multiple SAP npm packages were compromised in a supply chain attack designed to steal developer credentials and tokens.