ESET Research has released its H1 2026 Threat Report with statistics from December 2025 through May 2026.ClickFix - a social engineering technique leveraging fake error messages - has expanded into AI ...

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

A 'dumb phone' is a minimalistic phone that offers only a few features, often calls and texts, a camera, alarm, calendar and ...

A government customer of NSO Group used the company's Pegasus spyware to hack into the phone of a European politician, who at ...

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

Maccy users are being warned about fake sites after researchers found malware using the app’s name to steal Mac login ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Researchers at Zimperium have uncovered RedWing, a new Android malware-as-a-service sold through Telegram with subscription tiers, a support bot, and how-to videos. Once installed, it can steal ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.

There is welcome news for e-rickshaw drivers across the country. The Ministry of Electronics and Information Technology ...