A signature on a program tells you who built it, not whether it is safe to run. The campaign described by Check Point makes that distinction painfully clear. Attackers distributed

Check Point reported on October 27 that attackers distributed a malware chain using fake ChatGPT and Claude desktop applications hosted on GitHub. The…

Fashion retailer Revolve warned investors that hackers stole payment card information during a recent cyber incident, according to a filing with the S…

Shufti has launched Know Your Agent (KYA), an AI agent verification solution for autonomous AI agents that act on behalf of individuals and businesses…

Chainalysis, an American blockchain analysis firm, said it was the target of a cybersecurity incident. An external actor accessed non-sensitive custom…

CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. The agency based the additions on evidence of active exploitation…

Ransomware has spent years hitting hospitals, factories and city governments. Now the systems that run artificial intelligence are becoming part of the target list. A new tool call

The Hacker News reports that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a le…

Behnaz Karimi, co-lead of the OWASP AI Bill of Materials (AIBOM) initiative, developed a new framework called the Ransomware Assessment and Incident D…

Ahmad Umar Agha, a member of the Syrian Electronic Army known online as "Th3Pr0," was sentenced Thursday in federal court in Virginia to 42 months in …

A Syrian man who used a hijacked news agency Twitter account to post a fake report of explosions at the White House has been sentenced to 42 months in…

Hitachi Energy says it is aware of multiple vulnerabilities affecting its TRO600 series products. The company says the flaws can be exploited for remo…

Binance says it suffered a cyber-attack that led to $6.3bn of cryptocurrency being stolen, which it describes as the largest cyber-attack in history. …

The MR ROBOT operation shows how far criminal software has moved past the single phishing site. According to CloudSEK, the platform is a multi-tenant malware-as-a-service product:

Hitachi Energy says it is aware of OS command injection and Dirty Frag vulnerabilities that affect its CoreTec products. The company states that succe…

A new Android malware-as-a-service operation called MR ROBOT is renting customized banking trojans to criminals who target Indian bank customers, acco…

Bitdefender's 2026 IoT Security Landscape Report found that smart TVs and connected plugs accounted for a large share of recorded security weaknesses …

Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrenc…