Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows ...

AI vs AI cybersecurity arrived in documented form on May 10, when an LLM agent drove a four-pivot intrusion to database exfiltration in under an hour with no human direction. CrowdStrike data puts ...

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...

A threat actor has been observed using AI coding tools to develop and refine malware designed to slip past endpoint detection ...

Anthropic is expanding Project Glasswing, its security vulnerability program, and access to Mythos to 150 organizations ...

Anthropic initially released Project Glasswing to about 50 partners in April to test the model for cybersecurity flaws.

Starlink controversy, AI psychosis debates, invisible malware takedowns, and dangerous MCP vulnerabilities dominated this ...

Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...

The incident highlights how attackers can hide malicious code in software packages that differ from the source code available ...

Socket found seven malicious packages on PyPI The packages were abusing Gmail and WebSocket They were removed from the platform Several malicious PyPI packages were recently observed abusing Gmail to ...

Build 2026 runs from June 2-3 in San Francisco. Here's what Microsoft is expected to announce for GitHub Copilot, Azure AI ...