Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

They're not bad; they're just prompted that way. Sysdig threat hunters documented what they say is the first-ever documented ...

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...

Researchers at Sysdig say they have observed, for the first time, a ransomware attack carried out almost entirely by an AI agent. According to the ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

An AI agent carried out the technical execution of a real-world ransomware attack for the first known time, but new details ...

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...