In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

AI-native web browsers make it easier to get information and perform tasks online, but they also come with more security ...

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...

Attackers can exploit how AI bots hallucinate software URLs to create massive botnets. The vulnerability is endemic to every ...

Researchers at Zimperium have uncovered RedWing, a new Android malware-as-a-service sold through Telegram with subscription tiers, a support bot, and how-to videos. Once installed, it can steal ...

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

Clicking a captcha "I am not a robot" box and identifying images to prove it is second nature for many internet users. Now, cybercriminals are exploiting people's comfort with the routine to scam them ...

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe ...

WSL9x lets Windows 9x systems run a modern Linux 6.19 kernel without virtualization, showing how vintage PCs can still stretch beyond old limits. A 30-year-old Windows PC running a modern Linux kernel ...

For MIT “hack” enthusiasts, things fell right into place Sunday night at the university’s Cecil and Ida Green Building. Against the night sky, the tower’s 153 windows facing the Charles River were ...

Hackers have broken into at least one organization using Windows vulnerabilities published online by a disgruntled security researcher over the last two weeks, according to a cybersecurity firm. On ...

Other noteworthy stories that might have slipped under the radar: Jones Day hacked, Internet Bug Bounty program paused due to AI, new Mac stealer malware. SecurityWeek’s weekly cybersecurity news ...