Come for the coding test, stay for the C2 traffic Next.js developers are once again in the crosshairs as hackers seed ...

PromptSpy, discovered by ESET, is the first known Android malware to integrate generative AI into its execution flow.

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...

Threat actors compromised the Open VSX Registry on January 30, 2026, pushing malicious updates to four trusted VS Code extensions with over 22,000 combined downloads. The attack targeted macOS ...

A malware sample recently caught in security vendor Darktrace’s CloudyPots honeypot network was entirely generated by AI and built to exploit the widespread and maximum-security React2Shell ...

AI-fueled attacks can transform an innocuous webpage into a customed phishing page. The attacks, revealed in a research from Palo Alto Networks’ Unit 42, are clever in how they combine various ...

Talk about a monumental security lapse: American retail giant Target has found its proprietary source code exposed on the dark web, as current and former employees close to the matter confirm the ...

Mosyle has identified a macOS malware campaign that uses generative AI-assisted code and spreads through a fake AI app download. The Apple device management firm shared details of the malware named ...

Abstract: Java offers the Java Native Interface (JNI), which allows programs running in the Java Virtual Machine to invoke and be manipulated by native applications and libraries written in other ...

Typing a web address directly into your browser feels harmless. In fact, it feels normal. But new research shows that a simple habit is now one of the riskiest things you can do online. A recent study ...

A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...

In December 2025, the GlassWorm supply chain malware campaign emerged again, affecting both the Microsoft Visual Studio Marketplace and Open VSX platforms. This episode involved 24 extensions posing ...