A ransomware operation tracked as DeadLock has built its victim-communication and data-leak systems around blockchain technology, making the group's infrastructure considerably harder for defenders and law enforcement to dismantle. Security researchers first flagged the technique in a report publish
Security researchers have identified a new version of the XCSSET malware family, tracked as v40, spreading through compromised Xcode projects and vulnerable Git repositories. Analysts at Palo Alto Networks' Unit 42 documented the campaign in a detailed technical report. BleepingComputer separately
Security researchers have connected a firmware vulnerability in Coldcard hardware wallets to a string of thefts that drained an estimated 88.6 million USD in Bitcoin from thousands of victims. The flaw sits in the device's random number generator, the component responsible for creating the secret se
Security researchers have exposed a sustained espionage campaign in which the Russian state-sponsored hacking group known as Laundry Bear, also tracked as Void Blizzard or TA488, exploited zero-day vulnerabilities in two of the world's most widely deployed webmail platforms, Microsoft Exchange Outlo
Security researchers have uncovered two separate incidents in which criminals allowed an autonomous AI agent to operate with little or no human oversight during a live intrusion — one against a Thai government ministry and one carried out by a ransomware operation from start to finish. Researc
Security researchers have identified a new Windows-based malware strain called Dolphin X that combines the credential-stealing capabilities of a traditional infostealer with an artificial-intelligence-driven feature designed to help criminals decide which infected computers are worth attacking first
For years, macOS users have enjoyed a reputation for being less attractive targets than their Windows counterparts. While that perception has always been somewhat exaggerated, attackers traditionally invested more heavily in Windows malware because of its larger market share and greater return on in
For years, the cybersecurity industry has debated whether artificial intelligence would fundamentally change offensive cyber operations or simply make existing attackers more productive. Early evidence suggested the latter. Large language models accelerated research, generated scripts, translated ph
Android banking malware has evolved from simple credential-stealing applications into sophisticated remote access platforms capable of persistent device control. The latest version of RedHook shows how quickly mobile threat actors continue to innovate. Rather than relying solely on traditional Andr
For years, cybersecurity strategies have focused on protecting endpoints, identities, and cloud workloads. Yet a growing body of evidence suggests that another critical component of enterprise infrastructure has quietly become one of the most attractive initial access vectors for sophisticated threa