Named “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts.

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

North Korean hackers hijack developer credentials to inject malware into trusted software projects, compromising downstream ...

A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...

The bogus GitHub pages for AnyPS5 and KytyPS5 have been removed, but emulation fans should still pay attention to what ...

A Hugging Face model loaded with trust_remote_code ran a cryptominer, and in some builds a reverse shell. Every scanner ...

ESET APT report 2026 reveals Belarus-aligned hackers conducted the first-ever destructive cyberattack by a Belarus-linked ...

A high-severity flaw could expose AI training data, model artifacts, and cloud credentials when a crafted model configuration ...

Anthropic's evaluation of Mythos 5 revealed multiple cases of the AI model acting beyond the intended scope of cybersecurity ...

Stolen tokens and unrotated credentials drove a wave of supply chain attacks. Use these steps to protect your pipeline and your customers.

LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was ...