Russian hackers trojanize WebEx, Zoom apps to push Starland malware

A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and ...

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

Is that QR code a trap? How to spot quishing scams before it's too late

QR code phishing bypasses MFA, leading to data theft. How quishing attacks work, and what you can do to stay safe.  Ever had ...
Tallahassee Democrat

Malware and Sha1-Hulud, TeamPCP is increasing Phoenix rebases malware Blue Shield endpoint agent against dev malware

Malware now moves faster than advisories, targets AI agents writing your code, Blue Shield blocks malicious packages and skills at the agent, endpoint, pipeline The attacks now move faster than the ...
WBOC

Malware and Sha1-Hulud, TeamPCP is increasing Phoenix rebases malware Blue Shield endpoint agent against dev malware

September 2025 was the inflection point. The Shai-Hulud worm became the first self-replicating npm malware, and Palo Alto's Unit 42 has since tracked a steady acceleration in both the frequency and ...
The Hacker News

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload designed to trick a malware analyst's artificial intelligence (AI) tools ...
Science Daily

One tiny mutation may explain how bat viruses become human threats

Scientists found that one tiny genetic change can completely alter how a coronavirus behaves in different species. Comparing SARS-CoV-2 with a closely related bat-only virus, they showed that a single ...
The Hacker News

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker's web page, ...
IEEE

My Model is Malware to You: Transforming AI Models into Malware by Abusing TensorFlow APIs

Abstract: The rapid advancement of AI technologies has significantly increased the demand for AI models across various industries. While model sharing reduces costs and fosters innovation, it also ...