ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...

Arch Linux AUR malware has forced an emergency adoption freeze after Wave Three of the Atomic Arch campaign deployed a ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, ...

UAC-0145 uses fake CAPTCHA checks on compromised sites to push Windows malware, while COWARDDUCK backdoors Android devices ...

In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver ...

As governments, critical infrastructure operators, and software organizations increasingly integrate autonomous AI agents into security operations, the Friendly Fire research highlights an unresolved ...

Researchers at Sysdig say an AI agent called JADEPUFFER carried out a fully autonomous ransomware attack in just 31 seconds, exploiting a Langflow CVE-2025-3248 flaw, adapting to failed exploits in ...

An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known ...

Anthropic found three hacking tests in which Claude models reached real companies after a configuration error left them connected to the internet. One accessed ...

Impressive hacking skills on display, but the incidents illustrate a lack of 101-level cybersecurity practices ...