This week, CISA tightened patching rules, hackers provoked AI scanners. An accused Russian intel hacker appeared in court.

The malware used in the attack was dubbed “Miasma” and is described as a self-replicating worm designed to harvest login ...

A China-linked espionage group lived inside corporate cloud accounts for a year and a half by stealing trust instead of ...

The Gentlemen ransomware claims 478 victims as its AI-assisted RaaS operation adds worm-like spread capability.

Cybersecurity roundup: supply chain threats, AI agent risks, browser-cloning malware, mule networks, endpoint bypasses, and ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI ...

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...

Hackers are exploiting CVE-2026-5027, a high-severity path traversal issue in Langflow, for remote code execution.

Over 100 NPM and PyPI packages were injected with malicious code in the Miasma and Hades Shai-Hulud supply chain attack ...

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...