North Korea’s Lazarus hacking group has been linked to six new disruptive npm packages, which appear to target specific developers and could extract cryptocurrency data. The malicious packages, which have been downloaded over 330 times collectively, use misspelled names in a technique known as typosquatting to trick developers into unknowingly installing them. The techniques used in the attack closely align with previous tactics employed by the infamous Lazarus group, who have been linked to numerous high-profile crypto hacks.

Chinese hackers targeting Juniper Networks routers, so patch now
Chinese hackers are targeting routers made by American networking hardware company Juniper Networks. The culprits, known as UNC3886, are using specially modified backdoor malware to