Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...

An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware ...

Massive regional C2 footprint More than 1.3K C2 Servers Discovered in the Middle East Hunt.io said it identified more than ...

The risk is "materially understated", researchers are saying as passwords and critical data can be exfiltrated.

TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...