Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.

Researchers at Google have discovered that hackers are creating malware that can harness the power of AI during its execution ...

"The threat actors have recently resorted to utilizing JSON storage services like JSON Keeper, JSONsilo, and npoint.io to host and deliver malware from trojanized code projects, with the lure," NVISO ...

Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

Dating apps store sixteen data points per user on average. This includes location coordinates, device identifiers, facial ...

Further instances of the malware, which steals credentials and cryptocurrency, have appeared on Open VSX and aim to establish ...

Application security solutions provider Black Duck Software Inc. today announced the that it has added artificial ...

Over the last month, Barracuda threat analysts have seen the following notable developments in email-based threats targeting ...

Encryption alone is no longer sufficient to protect privacy in LLM interactions, as metadata patterns can be exploited to ...

Discover how Black Duck's AI Model Scanning helps you identify and manage AI/ML models in your software supply chain. Ensure license compliance, detect obscured models, and stay ahead of emerging AI ...

A year of escalating social-engineering attacks has produced one of the most efficient infection chains observed to date. Known as ClickFix, this method requires only that ...