Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

Hackers exploit ClickFix to deploy malware loaders and Python tunnels on Windows, potentially enabling ransomware attacks.

ESET APT report 2026 reveals Belarus-aligned hackers conducted the first-ever destructive cyberattack by a Belarus-linked ...

Hackers exploited CVE-2026-20127 to plant KeyDrift malware in Cisco SD-WAN systems, enabling encryption key collection and ...

Hackers are using fake Chocolatey and Microsoft Activation Scripts websites to distribute ArmorSteal, a Python-based malware family that can steal passwords, cryptocurrency wallets, browser cookies, ...

KongTuke is a criminal web traffic network behind fake CAPTCHA pages and the CrashFix browser extension scam on Windows. What ...

Cisco Talos revealed that attackers exploited a critical authentication bypass in Catalyst SD-WAN controllers to deploy ...

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...

ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.

Deception is moving at machine speed. Learn to keep pace. Huntress investigated multiple incidents stemming from an Amazon-themed ClickFix campaign tied to a sponsored Google search result for the ...

A cryptocurrency mining campaign has resurfaced on Hugging Face shortly after its earlier accounts were removed, using fake ...

This week delivered critical firewall patches, rented banking malware, weaponized PDFs, and zero-permission token theft alongside supply-chain hijacks and AI-powered attacks. Attackers borrowed trust ...