Anthropic published a detailed account on August 14, 2026 of how the text watermark in future Claude models works, identifying it as a version of the SynthID-Text technique Google DeepMind published ...

An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. The attack occurred on ...

A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of Microsoft Defender and establish persistent remote access inside a law firm’s ...

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its ...

Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

OpenAI says that its AI agents involved in the attack on HuggingFace had been talking to each other in secret since May. The AI agents shared vulnerabilities they found on a message board which was ...

A leaked n8n API key is only the start. GitGuardian's research traces the full chain, from exposed tokens and weak keys to ...

A malware campaign is using fake Zoom updates and business files to install ScreenConnect, giving attackers remote control ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

Everyone talked about autonomous agents. Almost nobody examined the two injection vectors that turned Hugging Face's dataset-processing pipeline into a production foothold.

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...