Cybercriminals are using fake updates to deliver malware across Windows, macOS, and Android. Our latest blog breaks down the full attack chain in six steps, revealing how attackers compromise websites, trick users, and steal sensitive data.

A recent typosquatting attack on Go developers disguised a malicious package as the popular BoltDB library, exploiting Go’s module caching system to keep the backdoor accessible even after the repository was cleaned.