Threat actors from the Silent Ransom Group, aka Luna Moth, are escalating attacks by impersonating IT staff in phone calls and even showing up in person to gain direct access to victim systems
Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator
