This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...

The makers of the celebrated hacking tool explain why their new open-source device uses physical controls, low-resolution ...

Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing ...

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...

By some benchmarks, Julia code can run 10X to 1,000X faster than Python—but there’s a reason it’s not a very popular ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...

A Full HD display would need more than two million chips. So Balwierz scaled the concept down to a 320 x 200 resolution, a ...

The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.

Armored Likho, a new APT group using AI-generated malware and the BusySnake Stealer to target government agencies and power ...