COLDCARD security audit phishing attack installs remote access tool

A BleepingComputer security-news feed highlights active and emerging threats, including phishing campaigns delivering remote-access malware, actively exploited enterprise vulnerabilities, supply-chain compromises, malicious developer extensions and packages, macOS malware, credential theft targeting Microsoft 365 and passkeys, and malware delivered through ClickFix and fake software installers. The feed includes high-impact incidents such as ChainDrop compromising more than 1,300 npm packages and campaigns attributed to APT29/Midnight Blizzard.