This week’s recap covers exploited flaws, supply chain attacks, phishing kits, AI lures, macOS stealers, urgent CVEs, tools, ...

A hobbyist network handed an autonomous agent a masterclass in why you don't give an AI agent a credit card and a deadline.

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter ...

Google reportedly patched a flaw in the Vertex AI SDK for Python that could allow attackers to hijack model uploads and ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

ESET found two Windows SprySOCKS variants with 30+ commands, C2 over TCP, UDP, and WebSocket, and government targets in 4 ...

Earlier this year, concerns were raised after it emerged that billions of images and scans contributed by Pokémon GO players had helped train a growing geospatial AI platform. Table of Contents A ...

The Quick Response code, more popularly referred to as a QR code, has really taken off in recent years, and it's easy to see why. Though COVID-19 helped mainstream it, these codes make sharing ...

ESET Research discovered two previously undocumented Windows variants of FishMonger’s SprySOCKS backdoor.ESET telemetry shows activity between ...