This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

I tested Claude Code, Codex, and OpenCode on real full-stack work: a Next.js feature, a backend bug, a legacy refactor, and ...

The makers of the celebrated hacking tool explain why their new open-source device uses physical controls, low-resolution ...

Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...