The security platform Socket has recently discovered an enormous worldwide malware operation that has been dubbed "TrapDoor".

TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...

AI vs AI cybersecurity arrived in documented form on May 10, when an LLM agent drove a four-pivot intrusion to database exfiltration in under an hour with no human direction. CrowdStrike data puts ...

AI systems are no longer passive tools. They make decisions, execute multi-step workflows and access sensitive data ...

An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware ...

Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by ...

Supply chain chaos, old bugs, smarter phishing, and botnets everywhere — here’s what broke the internet this week.

What Is the Default Mode Network? The default mode network is a system of connected brain areas that show increased activity when a person is not focused on what is happening around them. The DMN is ...

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. The attacker ...