North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.

A fake Go module posing as golang.org/x/crypto captures terminal passwords, installs SSH persistence, and delivers the ...

A critical OpenClaw flaw allowed malicious websites to connect to locally running agents, brute-force passwords without ...

While the Windows maker did not attribute the activity to a specific threat actor, the use of VS Code tasks and Vercel ...

A hacker exploited Anthropic PBC’s artificial intelligence chatbot to carry out a series of attacks against Mexican ...

Linux kernel maintainers propose a less painful process for identifying developers. See how it can make Linux code safer than ever.

The Arkanix Stealer malware can collect and exfiltrate system information, browser data, VPN information, and arbitrary files ...

A Russian hacker was recently seen brute-forcing their way into hundreds of firewalls - but what makes this campaign really stand out is the fact that the seemingly low-skilled threat actor was able ...

Generative AI tools analyzed target networks and wrote exploit code, enabling an opportunistic attacker to have an outsized ...

Amazon Threat Intelligence has revealed that a single “unsophisticated” attacker has compromised more than 600 organisations ...

An AI-assisted hacker campaign breached over 600 FortiGate firewalls worldwide by exploiting weak credentials and public interfaces in a chilling demonstration of how generative AI ...