China malware hospital espionage: Group-IB exposed JadeProx, a China-nexus cluster that breached a Vietnamese hospital ...

ANY.RUN reveals how PhantomEnigma abused compromised Brazilian government infrastructure, uncovered a new backdoor generation ...

The latest large language models have high false-positive rates and fail to take into account the context of scans, leading ...

A new type of malware can worm deep into AI coding systems to steal data and logins—and can flip a “death switch” to destroy ...

Microsoft has warned that attackers are varying their post-exploitation techniques while relying on the same ClickFix lure, ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026.ClickFix - a social engineering technique leveraging fake error messages - has expanded into AI ...

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs with stealthy, custom-developed credential-stealing code. The malware is ...

Multiple weaponized proof-of-concept (PoC) exploits on GitHub were found delivering a Python-based remote access trojan (RAT) named ChocoPoC that can execute commands and steal sensitive data in a ...

A newly discovered malware campaign is abusing a malicious Microsoft Edge extension to break out of the browser sandbox and gain control of infected Windows systems. Security researchers at Zscaler ...

Attackers no longer need to ship malicious code to compromise a target - they can build it on the fly using artificial intelligence. Defenders must now inspect AI conversations and agent traffic, not ...