TypoPrompting exploits mistyped AI website addresses to redirect users to fake pages that deliver malware and browser hijackers.

The Department of Justice and FBI announced two separate actions in response to North Korea-linked cryptocurrency theft ...

North Korean hackers used stolen webcam recordings, deepfakes and hijacked accounts to steal cryptocurrency and compromise ...

CopperDragon malware supplier may link five Chinese hacking groups, Check Point Research said Tuesday in a report on three espionage campaigns against telecoms, governments and critical infrastructure ...

The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.

How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for teams shipping agents.

FBI says North Korea-linked FaceStealer stole over $400 million in crypto using fake video calls; U.S. authorities seized its infrastructure.

On Wednesday, a decades-old open source web technology called PHP almost broke the internet, thanks to two vulnerabilities that had sat dormant for years until researchers recently figured out a way ...

Earlier this month, authorities worldwide urged website administrators to execute emergency updates after a nonprofit programming foundation flagged critical security flaws that could allow hackers to ...