One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

A sophisticated malware campaign is making use of WhatsApp to distribute the Eternidade Stealer banking trojan across Brazil, using social engineering tactics and automated message propagation to ...

An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript files, leading to remote system access. The threat actor is using file names ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet, also known as BlueNoroff. This attribution ...

Cyber security careers are expanding as India faces rising cyber threats, creating opportunities for students in Nagaland.

The Russian state-sponsored hacking group Sandworm is now using the ClickFix attack technique to infect organizations in ...

OpenAI has built an LLM super-hacker called GPT-Red that it uses as a sparring partner to help its other models boost their ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...

With the ability to take control of distributed devices at scale, HalluSquatting has the potential to achieve various ...

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...