A surge in LummaStealer infections has been observed, driven by social engineering campaigns leveraging the ClickFix technique to deliver the CastleLoader malware.

Compromised dYdX npm and PyPI packages delivered wallet-stealing malware and a RAT via poisoned updates in a software supply chain attack.

Keeping up with the latest malware threats is a full-time job, and honestly, it’s getting pretty intense. From AI messing ...

Sign of the times: An AI agent autonomously wrote and published a personalized attack article against an open-source software ...

CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.

How modern infostealers target macOS systems, leverage Python‑based stealers, and abuse trusted platforms and utilities to ...

AI agents lack independent agency but can still seek multistep, extrapolated goals when prompted. Even if some of those prompts include AI-written text (which may become more of an issue in the ...

An AI agent got nasty after its pull request got rejected. Can open-source development survive autonomous bot contributors?

Python -O won’t magically make every script faster, but in the right workloads it’s a free win—here’s how to test it safely.

This week’s cybersecurity recap highlights key attacks, zero-days, and patches to keep you informed and secure.