GameSpot

After Infecting PCs With Malware, Gacha Game Gives Out Free Loot Boxes To Apologize

After a "cybersecurity incident" that saw player PCs infected with a Trojan, Duet Night Abyss's devs are giving away 10 free gacha pulls.
InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

New Android malware is built to scan your notes for sensitive details

The malware is hiding in IPTV apps ...
Blockonomi

Google Flags Apple iOS Crypto Malware Targeting iPhones

Google uncovers Apple iOS exploit chain deploying Ghostblade malware targeting crypto apps on unpatched iPhones.

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
The Hacker News

Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams

Google adds 24-hour sideloading delay amid 17 malware families in 4 months, reducing scam-driven installs and device ...

FBI investigates Steam games with hidden malware

If you downloaded one of these games, the FBI wants you to reach out.
Macworld

DarkSword malware targets iPhones that haven’t been updated yet

The Google Threat Intelligence Group has posted a report about malware that uses six different security vulnerabilities to attack an iPhone. According to the report, a toolkit called DarkSword has ...
Microsoft

When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures

During tax season, threat actors reliably take advantage of the urgency and familiarity of time-sensitive emails, including ...
The Hacker News

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
Blockonomi

DarkSword Malware Strikes iOS: Crypto Wallets Under Attack

DarkSword exploit compromises iOS 18.4-18.7 devices, targeting cryptocurrency wallets including Coinbase, Binance, and MetaMask. Update to iOS 26.3 now.

Gacha Game Apologizes For Giving Players Malware With Some Free Loot Boxes

The team behind Duet Night Abyss, a free-to-play gacha RPG from developer Pan Studio and publisher Hero Games, has apologised for a “cybersecurity incident” that occurred last night, on March 18, ...