AppsFlyer Web SDK used to spread crypto stealer JavaScript code

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.
9to5Google

Meta is killing end-to-end encryption for Instagram DMs soon

Meta has confirmed that, soon, it will remove support for end-to-end encryption for Instagram DMs. Confirmed on a support ...

Security Flaw in WordPress Plugin Puts 400,000 Websites at Risk

A security flaw in the Ally WordPress plugin used on more than 400,000 sites could allow attackers to extract sensitive data ...

New PhantomRaven NPM attack wave steals dev data via 88 packages

New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.

Signal issues scam warning to users after hackers target officials

Signal says its systems are secure but it is taking reports of targeted attempts to hack some officials "very seriously".