ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...
One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, ...
In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver ...
As governments, critical infrastructure operators, and software organizations increasingly integrate autonomous AI agents into security operations, the Friendly Fire research highlights an unresolved ...
Researchers at Sysdig say an AI agent called JADEPUFFER carried out a fully autonomous ransomware attack in just 31 seconds, exploiting a Langflow CVE-2025-3248 flaw, adapting to failed exploits in ...
Arch Linux AUR malware has forced an emergency adoption freeze after Wave Three of the Atomic Arch campaign deployed a ...
An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known ...
Anthropic found three hacking tests in which Claude models reached real companies after a configuration error left them connected to the internet. One accessed ...
An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...
Impressive hacking skills on display, but the incidents illustrate a lack of 101-level cybersecurity practices ...