A critical vulnerability in the GNU C Library (glibc) is putting millions of Linux systems at risk of local privilege escalation and arbitrary code execution, according to a security advisory published May 16. Tracked as CVE-2025-4802, the flaw affects glibc versions 2.27 through 2.38 and stems from improper handling of the LD_LIBRARY_PATH environment variable in […]
A newly uncovered ransomware campaign is targeting supporters of Elon Musk with a mix of technical sophistication and satirical messaging, according to researchers at KrakenLabs. Identified as a variant of the Fog ransomware family, the attack chain begins with phishing emails containing PDFs labeled “Pay Adjustment.” These lure victims to a Netlify-hosted ZIP file that […]
A newly uncovered supply chain attack targeting the Node Package Manager (NPM) ecosystem is employing Google Calendar as a covert command and control (C2) channel, security researchers at Veracode said. The malware, embedded in JavaScript packages downloaded over 35,000 times, uses obfuscated payloads to evade detection and establish persistent access. Once installed, the malware abuses […]