NodeStealer now steals data and adds keylogging, clipboard monitoring, and screen capture, expanding into full surveillance.

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based reverse tunnel implant, granting attackers access to an organization’s ...

A password reset attack hit X (Twitter) on Tuesday. X found no breach and blames attackers chasing X Money wallets.

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an ...

A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates ...

A previously undocumented malware loader, dubbed SynkLoader, that combines Python, C#, and native C++ components to evade ...

SynkLoader malware is spreading through Microsoft Teams phishing, using a fake Windows lock screen to steal credentials and enable remote access.

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP ...

Bob Bramblet is a Lee County Sheriff's Office employee, outdoorsman, and award-winning writer. He hunts invasive Burmese pythons in the Everglades to protect native wildlife. Bramblet has written a ...

Microsoft released a record number of security patches for Windows, Office, and other tech product lines this week, citing the use of AI to aid the discovery of code vulnerabilities. The technology ...

As a genre, the “award acceptance lecture” is little more than a formality and a banality. But there is at least one charming exception to this rule—the talks given by the foremost computer scientists ...