An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed ...

New malware SynkLoader uses a fake Windows lock screen to steal users’ login passwords and give attackers remote access to ...

NSA, CISA, FBI, DOE, and EPA warn of active AI-assisted attacks against Siemens S7 PLCs across US critical infrastructure ...

U.S. agencies are warning that unnamed threat groups are using AI in attempts to breach outdated and unpatched Siemens S7 Series PLCs to attack critical infrastructure systems in water, agriculture, ...

Security researchers have identified a new malware loader, dubbed WordlistLoader, used in ClearFake campaigns to deliver the ...

U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable ...

The implant ensures defenders only see legit Microsoft services rather than unknown external domains, making it more ...

A massive supply chain attack on LiteLLM open-source AI gateway has exposed the authentication secrets of over 2,500 ...

The LiteLLM Breach and the New Reality of AI Infrastructure On March 24, 2026, the Python Package Index (PyPI) hosted malicious versions of the LiteLLM library—specifically 1.82.7 and 1.82.8—for ...

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure.

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure. Security researchers are warning of a newly ...