Clean GitHub Repos Are Tricking AI Coding Agents Into Running Malware
Security researchers have demonstrated a disturbingly simple way to compromise developers using AI coding assistants. A clean-looking GitHub repository with…
Security
Cybersecurity, vulnerabilities, threats, and defense
DCloud Uni-App Framework Powers Over 200,000 Scam Websites Worldwide
A Chinese open-source development framework called Uni-App has become the backbone of a massive global scam ecosystem, with more than…
OpenAI Previews GPT-5.6 Sol With Tighter Access Controls and Stronger Cyber Defenses
OpenAI released three versions of GPT-5.6 on Friday — Sol, Terra, and Luna — as a limited preview to a…
SecondFi Sets Two-Week Recovery Timeline After $2.4M Cardano Wallet Exploit
SecondFi says it’s mapped out a recovery plan for users hit by this week’s Cardano wallet breach, and expects to…
Ransomware Attacks Surge Again Led by LockBit and Conti Offshoots
Ransomware attacks are back on the rise after a brief dip, with NCC Group recording 198 successful campaigns in July…
0ktapus Phishing Campaign Compromised 130 Companies Through Okta Spoof
A massive phishing campaign tied to abuse of identity provider Okta compromised 9,931 accounts across more than 130 organizations, according…
Chinese APT Uses Watering Hole Attacks to Plant ScanBox Keylogger
A China-linked threat group has been compromising websites to plant the ScanBox JavaScript reconnaissance framework on visitors’ browsers, targeting organizations…
Cybersecurity Professionals Losing Trust in Fully Automated AI Testing
Confidence in fully automated AI-powered vulnerability testing has collapsed among cybersecurity professionals, according to Cobalt’s 2026 State of Pentesting Report….
Scammers Exploit Shopify’s Shop App with Fake Order Receipts
Threat actors are abusing Shopify’s popular Shop order-tracking app to slip fake purchase receipts into users’ order histories, a tactic…
GTA VI Hype Drives Wave of Fake Early Access Scams
Cybercriminals are cashing in on the massive hype around Grand Theft Auto VI, spinning up fake websites that promise “VIP…