Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...
Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.
Science Daily

Ordinary WiFi can now identify people with near perfect accuracy

Scientists in Germany have demonstrated a startling new form of surveillance: identifying people using nothing more than ordinary WiFi signals. By analyzing how radio waves bounce around a room, ...
The Hacker News

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.
SecurityWeek

Armored Likho APT Targeting Government, Electric Power Entities

The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.
PCMag on MSN

Backdoor Found in the Firmware for These Wi-Fi Routers. And There's No Patch

A vulnerability report warns that five versions of Tenda firmware contain an 'undocumented authentication backdoor' that a ...