NodeStealer now steals data and adds keylogging, clipboard monitoring, and screen capture, expanding into full surveillance.

FortiGuard Labs details an LLMjacking attack in which hackers used a leaked AWS admin key to subscribe to AI models and ...

A newly disclosed vulnerability in the Hugging Face Transformers library can cause attacker-controlled Python code to be ...

A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates ...

Australian authorities have charged two alleged TeamPCP members after software supply chain attacks exposed over 500,000 credentials and at least 300GB of data.

ChatGPT may spew a lot of digital garbage onto the internet, but the same bots that output the trash can be used to stop it.

We found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on Cosmos SDK, that lets any user grant themselves admin control over marker accounts without holding a single ...

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

You might think that the information-security professionals who show up in August at the annual Black Hat conference in Las Vegas would know to bring their A game to that gathering. But every year, ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP ...

Bob Bramblet is a Lee County Sheriff's Office employee, outdoorsman, and award-winning writer. He hunts invasive Burmese pythons in the Everglades to protect native wildlife. Bramblet has written a ...

Learn how BitLocker, passkeys, Microsoft Defender, and other Windows 11 security features protect your data, accounts, apps, and devices. Windows 11 comes with plenty of built-in security tools, but ...