This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

The makers of the celebrated hacking tool explain why their new open-source device uses physical controls, low-resolution ...

Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

By some benchmarks, Julia code can run 10X to 1,000X faster than Python—but there’s a reason it’s not a very popular ...

JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

In other news, a DHS database was hacked, Adobe is releasing patches twice a month, and Canada has disrupted ransomware operations.

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...

A Full HD display would need more than two million chips. So Balwierz scaled the concept down to a 320 x 200 resolution, a ...