Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...
The Hacker News

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos says Claude Code, Cursor, and Codex triggered Windows endpoint rules for credential access, LOLBin downloads, and ...
eLife

Celldetective, an AI-enhanced image analysis tool for unraveling dynamic cell interactions

Celldetective is an open-source software integrating segmentation, tracking, and event detection to perform high-throughput end-to-end study of dynamic cell interactions, without requiring coding ...
techtimes

First AI-Agent Ransomware Destroyed Data Even Payment Could Not Recover

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
IEEE

A Lightweight Blockchain Framework for Secure Academic Credential Verification Using Python and Docker

Abstract: Academic credentials are becoming more vulnerable by fraud, falsification, and inefficiencies in existing verification processes. This research uses Python and Docker to create a safe, ...
WeLiveSecurity

OceanLotus: From external espionage to domestic targeting

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...