This week’s ThreatsDay Bulletin covers malicious packages, fake apps, AI prompt attacks, exposed systems, weak defaults, and stealthy malware traffic.

APT42 phishing campaign SpearSpecter now deploys AI-generated lures and controls its TAMECAT backdoor through Telegram — and ...

Don't reinstall Windows if you PC is slow. Try these simple tricks, and you should see a noticeable speed boost.

Russia's Sandworm hacking group is using fake CAPTCHA prompts to infect Ukrainian devices with malware across ten-plus ...

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...

ClickLock is a new macOS malware that repeatedly kills system processes and tricks victims into entering their login password ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...

Hackers are using this insidious scam to get unwitting victims to install malware themselves.

Mozilla's 0din security team has discovered widespread prompt injection AI malware plaguing the GitHub ecosystem. This exploit, dubbed "indirect prompt injection," isn't the first of its kind.

Creative Arts Emmys nominee Robby Hoffman admits she was a "sore loser" at the ceremony in 2025, so much so that she tried to bail on presenting later in the evening. "We are beyond surprised to lose, ...