JadePuffer exploited a vulnerable Langflow server, harvested credentials, moved laterally, and encrypted more than 1,300 ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the ...

A growing trend in modern intrusions is the compromise of internet-facing edge appliances such as firewalls and VPN gateways. Systems traditionally deployed as security boundaries are increasingly ...

I'd like to thank my co-author, Martin Zugec, for his valuable contributions to this report. This intrusion adds three dimensions to the public understanding of Chinese APT activity in contested ...

Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating worm that spreads through stolen developer npm tokens. The malware ...

And yet, within the same weeks that developers were racing to deploy OpenClaw, security researchers at Cisco, Palo Alto Networks, and Oasis Security were publishing some of the most alarming AI ...

Nvidia dominated tech news this week, as its hold on the artificial intelligence factory boom only tightened at its annual GTC conference in San Jose. It introduced a raft of updated chips and ...

Controls your browser via Chrome DevTools Protocol Executes shell commands Manages email and calendar Writes and reads files Operates continuously via a heartbeat scheduler that wakes it at set ...

The Justice and Emergency Services Management Committee (JESMC) are delighted to launch the digital skills catalogue for the public sector! Alongside procurement and Artificial Intelligence, digital ...

This blogpost introduces our latest white paper, presented at Virus Bulletin 2025, where we detail the operations of the North Korea-aligned threat actor we call DeceptiveDevelopment and its ...