Researchers link the India-focused operation to ChinaNet infrastructure and tactical overlaps with Silver Fox, but ...

AI SOC buyers should test data correlation, full-lifecycle agents, auditable verdicts, staged autonomy, and measurable ...

TrojPix uses imperceptible pixel modulation so copper video cables radiate data, hitting 8.1 Mbps in lab tests with a nearby ...

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...

LevelBlue says QuimaRAT uses encrypted plugins, OS-specific persistence, and JNA libraries to control Windows, Linux, and ...

Opera GX patched a flaw that let malicious sites silently install GX Mods and leak a signed-in user’s Gmail address with CSS.

The case study found no encryptor or locked machines, only stolen files used as leverage in a month-long negotiation ending ...

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Citizen Lab says Pegasus hit Kouloglou’s iPhone in 2022 and 2023 via Apple’s HomeKit zero-click exploit, patched in iOS 16.3.1.

Jamf says the Rust-based PamStealer targets Apple Silicon Macs, steals browser, wallet, Keychain, and clipboard data, and persists.