Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
SecurityWeek

Multiple Jscrambler Packages Impacted by Supply Chain Attack

Malicious Jscrambler NPM package versions distributed a cross-platform credential stealer in a new supply chain attack.

Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...

Now, defenders are embracing the prompt injection, too

Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...
HackerNoon

Rogue Agent: How a Single Code Block Could Hijack Your AI Conversations in Google’s DialogFlow

Discover how the Rogue Agent vulnerability in Google Dialogflow CX enabled persistent AI agent compromise, data exfiltration, ...

Scammers are now cloning trusted news websites to steal your money

Cybercriminals are cloning trusted news websites using AI-generated content to promote fake investment schemes, making it harder than ever to distinguish legitimate journalism from scams.