AI-Powered GitHub Bot Quietly Targeted 500+ Repositories for Three Weeks Before Anyone Noticed
A threat actor armed with AI-assisted automation spent three weeks silently probing open-source repositories before security researchers caught on — …
Malware
The LiteLLM Hack Was Just the Opening Move. Now 300K Dark Web Users Are Being Armed With Ransomware
What started as a poisoned Python package has evolved into something with far darker implications — a coordinated alliance between supply chain hacke…
Hackers Poisoned a Python Package Trusted by 95 Million Monthly Installs — and It Stole Everything
The Python package that quietly powers AI infrastructure for thousands of organizations — routing API calls across OpenAI, Anthropic, Bedrock, and 10…
Your New Android Tablet May Have Been Compromised Before You Even Opened the Box
A new Android backdoor called Keenadu was shipped inside tablet firmware before devices ever reached consumers' hands — and it's already clai…
Sha1-Hulud 2.0: Destructive Worm Hijacks 25,000+ GitHub Repos in Massive NPM Supply Chain Attack
Over 700 npm packages compromised as self-replicating malware targets developer credentials across Zapier, PostHog, Postman, and ENS Domains—with a s…
Google: Hackers Now Using AI to Create Shape-Shifting Malware
A new report from Google’s Threat Intelligence Group (GTIG) reveals that cybercriminals and state-backed hackers are now using artificial intelligenc…
Hackers Weaponize Browser Cache to Deliver Malware Without Detection
Cybersecurity researchers have uncovered a sophisticated phishing campaign that exploits browser caching mechanisms to smuggle malware onto victims&#…
XCSSET Malware Returns with Advanced Clipboard Hijacking to Steal Crypto Wallets
A sophisticated new variant of the XCSSET malware is targeting macOS developers through infected Xcode projects, introducing dangerous clipboard hija…
China Backed BRICKSTORM Malware Targets US Tech
Sophisticated threat group exploits network appliances lacking security tools to steal secrets and potentially develop zero-day exploits A China-nexu…
New YiBackdoor Malware Spotted with Dangerous Links to Banking Trojans
Security researchers have uncovered a sophisticated new malware family that borrows heavily from notorious banking trojans, raising concerns about ev…
Mandiant Uncovers Sophisticated macOS Malware Targeting Apple Silicon
Security researchers at Mandiant have discovered that sophisticated threat actors are increasingly using x86-64 compiled malware to target Apple Sili…
Microsoft Uncovers Massive Malvertising Campaign Affecting One Million Devices via GitHub
Microsoft Threat Intelligence has detected a large-scale malvertising campaign that impacted approximately one million devices globally in December 2…
New Linux Backdoor "Auto-Color" Targets Universities and Government Offices
Palo Alto Networks' Unit 42 researchers have discovered a sophisticated new Linux malware called " Auto-Color ," which primarily target…
Steam Removes Malware-Infected Game "PirateFi" After Security Breach
Valve has removed a free-to-play game called " PirateFi " from its Steam platform after discovering it contained malicious software designe…
Researchers Uncover Sophisticated Chinese Mobile Surveillance Tool EagleMsgSpy
Threat Intelligence researchers at Lookout Threat Lab have uncovered EagleMsgSpy, a sophisticated surveillance tool developed by Wuhan Chinasoft Tok…
Android Malware "Necro" Infects Millions of Devices via Google Play
Security researchers at Kaspersky have uncovered a new version of the Necro malware that has infected over 11 million devices through Google Play an…
New Android Malware Exploits NFC to Steal Cash
Security researchers at ESET have discovered a novel Android malware campaign that utilizes near-field communication (NFC) technology to facilitate u…
U.S. Government Disrupts Russian Cyber Espionage Network
The U.S. Department of Justice announced Thursday that it has successfully disrupted and partially dismantled a global cyber espionage network operat…
FritzFrog Botnet Expands Attack Arsenal with Log4Shell Exploits
The notorious FritzFrog botnet has added a new exploit to its arsenal: Log4Shell . This finding comes from threat researchers at Akamai, who have bee…
Meet PyLoose – First Python-Based Fileless Attack in the Wild
Researchers from the cloud security firm Wiz.io have documented an innovative fileless cyberattack that targets cloud workloads. This Python-based a…