In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.

Copilot in Excel introduces new finance-focused capabilities that help teams work to their standards, use trusted financial data, and stay in control of every change. GPT‑5.5 Instant is now available ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

The promise of autonomous AI agents is rapidly turning into a security beachhead for initial access. Our labs have detected a series of malicious campaigns targeting OpenClaw (formerly known as ...

Another year passes. I was hoping to write more articles instead of just these end-of-the-year screeds, but I almost died in the spring semester, and it sucked up my time. Nevertheless, I will go ...

An investigation into what appeared at first glance to be a “standard” Python-based infostealer campaign took an interesting turn when it was discovered to culminate in the deployment of a ...

Villager, a new penetration-testing tool linked to a suspicious China-based company and described by researchers as "Cobalt Strike's AI successor," has been downloaded about 10,000 times since its ...

Cybersecurity buff into OSINT, wireless hacking,and cloud DevOps — learning fast, hacking smart. With the Wi-Fi security fundamentals covered, we are ready to get our hands dirty… Disclaimer: ...