The campaign, observed in February 2026, has been assessed to share overlaps with a prior campaign mounted by Laundry Bear, a ...

North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...

During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...

WebRTC skimmer exploits PolyShell flaw since March 19, hitting 56.7% stores, enabling stealth data theft bypassing CSP.

The newly observed malware abuses VS Code’s “runOn:folderOpen” feature to execute automatically from trusted projects, ...

New integration lets AI agents translate documents across 120+ languages without leaving the tools developers and ...

Health Funding Cost Projector and Premium Renewal Stress Test offer multi-year cost modeling across seven funding ...

WASHINGTON, DC – The acting head of the nation’s cyber defense agency, Madhu Gottumukkala, uploaded sensitive government contracting material into a publicly accessible version of ChatGPT last summer, ...

Supply chain attacks feel like they're becoming more and more common.

Kie.ai''s GPT-5.4 Codex API streamlines front-end development by automating UI code generation, multi-file refactoring, and ...

Leaked "DarkSword" exploits published to GitHub allow hackers and cybercriminals to target iPhone users running old versions ...

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...