Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that ...

New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs ...

The converter runs entirely offline on Windows. No data file leaves the user’s device during conversion.

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

Seedance 2.5 API is live on BytePlus: ByteDance's 30-second single-pass AI video model launches today with 50 multimodal ...

Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover ...

Daxin resurfaces at a Taiwan manufacturer alongside Stupig, a new backdoor that runs SYSTEM commands before sign-in through ...

CrashStealer, a newly documented Mac infostealer, used an Apple-notarized meeting app to reach victims before stealing ...

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...

Vibe coding can generate validation scripts, but it can't verify real contact data. Learn why production systems require ...

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...