An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

The terminal is fine. But if you actually want to live in your Hermes agent, here are the four best GUIs the community has ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

ScarCruft spreads BirdCall via sqgame.net since late 2024, targeting Android users, enabling surveillance and data theft.

With model devs pushing more aggressive rate limits, raising prices, or even abandoning subscriptions for usage-based pricing ...

A stealthy Python-based backdoor framework capable of long-term surveillance and credential theft has been identified ...

A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named 'Snow' which includes a ...

Attackers exploit Microsoft Teams and Snow malware to steal credentials and take over enterprise networks through social ...

Say "no" to running dubious scripts.

A cyber group is impersonating IT helpdesk staff via Microsoft Teams to deploy malware and target corporate systems.

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...

OX Security confirmed arbitrary command execution on six live platforms and estimates 200,000 MCP servers are exposed. Here's ...