JadePuffer could be the first reported case of a ransomware attack driven by AI from start to finish. How can businesses ...

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into ...

North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

Securonix uncovers the Veil#Drop malware framework, which abuses compromised websites and Google Blogspot to deploy the PureLog information stealer.

JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.

Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, "software supply chain security" meant one question: what's in your code? Which open-source packages, ...

Terms often used in cybersecurity discussions and education, briefly defined. Your corrections, suggestions, and recommendations for additional entries are welcome: email the editor at editor@n2k.com.