Everything is dumb again. This week feels broken in a very familiar way. Old tricks are back. New tools are doing shady crap. Supply chains got hit. Fake help desks worked. Weird research showed how ...

A sophisticated threat campaign, first identified by Elastic Security Labs in early February 2026, has been actively deploying a custom-built remote access trojan (RAT) dubbed MIMICRAT through a multi ...

The dissector is bundled as a Wireshark plugin. More information can be found here: https://www.wireshark.org/docs/wsug_html_chunked/ChPluginFolders.html the personal ...

How threat actors are weaponizing large language models to create autonomous, self-modifying malware that challenges everything we thought we knew about cybersecurity On November 5, 2025, Google's ...

Google has discovered a new breed of AI-powered malware that uses large language models (LLMs) during execution to dynamically generate malicious scripts and evade detection. A Google Threat ...

Threat researchers discovered the first AI-powered ransomware, called PromptLock, that uses Lua scripts to steal and encrypt data on Windows, macOS, and Linux systems. The malware uses OpenAI’s ...

Proof-of-concept ransomware uses AI models to generate attack scripts in real time. AI-powered malware is closer than expected, as the first known ransomware family to rely on AI systems for local ...

Cybersecurity company ESET has disclosed that it discovered an artificial intelligence (AI)-powered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gpt ...

UPDATE (September 3 rd, 2025): ESET Research has been contacted by the authors of an academic study, Ransomware 3.0: Self-Composing and LLM-Orchestrated, whose research prototype closely resembles the ...

The leaked internal chat communications of the Black Basta ransomware group offer an unprecedented view into how cybercriminals operate, plan attacks, and evade detection. The Veriti Research team ...

A previously unknown threat actor dubbed 'Sandman' targets telecommunication service providers in the Middle East, Western Europe, and South Asia, using a modular info-stealing malware named 'LuaDream ...