A sprawling supply-chain attack dubbed `Mini Shai-Hulud` has compromised **hundreds** of open-source packages, including **TanStack** and ...

A sprawling supply-chain attack dubbed "Mini Shai-Hulud" has compromised hundreds of open-source packages, including TanStack and MistralAI.

Instead of sending phishing emails or planting fake links, they are now burying malicious code deep inside Git hooks — small automated scripts that ...

Google says cybercriminals and state-backed hackers are rapidly adopting generative AI to automate attacks, disguise malware, ...

Online threats have changed. Hackers are now using artificial intelligence to create smarter phishing scams, fake websites, and hundreds of ...

How the unique anti-exploitation capabilities included with Sophos Endpoint blocked a supply chain attack. May 12, 2026. Mark Loman.

ReversingLabs (RL) researchers analyzed CVE-2026-31431, a Linux kernel local privilege escalation vulnerability tracked in public reporting under ...

Package Firewall blocks malicious, vulnerable, and non-compliant packages before they reach a developer machine or CI runner.

A fraudulent AI model posing as an OpenAI release briefly became one of the most downloaded projects on Hugging Face.

Iran-linked attackers spent a week inside the network of a major South Korean electronics manufacturer in February 2026, as part of a sprawling ...

AI-enabled malware and exploit development are expanding, Google Threat Intelligence Group findings show.

Hundreds of npm packages infected by the self-propagating, credential-stealing worm from TeamPCP are related to the open source TanStack ...

Researchers found a ClickFix campaign that uses fake Claude setup guides to trick Mac users into infecting themselves.

Microsoft Threat Intelligence said in an X post on Monday that it is investigating a compromise of the mistralai PyPI package after attackers ...

Threat group Team PCP relaunched the Mini Shai Hulud campaign, a self-propagating supply chain attack that spreads by stealing CI/CD secrets.

CRPx0 is a complex, stealthy malware campaign that targets macOS and Windows systems, and appears to have Linux capabilities in development.

Google's Threat Intelligence Group warned cyber adversaries are increasingly using generative AI tools to support multiple stages of the ...

Cybersecurity researchers find malware on Hugging Face for download, containing attack code for Windows and other hosts.

Learn how to spot ClickFix malware scams before they compromise your device. Follow our practical tips to recognize fake alerts and avoid phishing ...

A new TrickMo Android banking trojan variant uses TON blockchain infrastructure for stealthy command-and-control communications.