CrashStealer Mac malware uses a signed Werkbit installer and fake password prompt to steal Keychain data, browser credentials ...

JADEPUFFER exploits Langflow CVE-2025-3248 to deploy ENCFORGE ransomware against AI model weights, vector indexes, and ...

Mac users who want to leave the macOS Golden Gate beta must erase their startup disk and reinstall Tahoe, making a verified ...

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, ...

The agentic operator documented as the first ransomware campaign run end-to-end by a large language model (LLM) has returned ...

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a ...

Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and ...

Somewhere, a hard drive is filling up with secrets no one can read yet, and its owner is waiting for the machine that opens ...

Attackers combined remote access, credential theft and data collection tools to quietly gather and remove sensitive ...

GoSerpent backdoor spent five years harvesting Southeast Asian government police files, biometric databases, and diplomatic ...

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

Telegram Serverless lets developers deploy bot backends on Telegram's own infrastructure with a single tgcloud command, but ...