Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is ...

Canadian hacker Aubrey Cottle sentenced to 18 months custody after pleading guilty to cyberattack charges

Canadian hacker Aubrey Cottle has been sentenced to 18 months in custody after pleading guilty to three charges stemming from ...
MUO on MSN

Browsers can track you by your graphics card — and almost no privacy tool stops it

Privacy gets awkward when your hardware starts introducing itself to websites.
Decrypt

This AI Agent Survived 6,000 Hack Attempts—Here’s How

Developer Fernando Irarrázaval's AI agent experiment drew over 6,000 hack attempts from more than 2,000 attackers. No one ...
Microsoft

Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in ...
SecurityWeek

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild

Hackers exploited a vulnerability in PTC Windchill in the wild, marking the first confirmed real-world abuse of the PLM ...
Cyber Daily

Report: Aussie journalists & human rights orgs coming under increasing cyber attack

Cloudflare’s latest Project Galileo Report celebrates the 12th anniversary of its program to protect civil society groups, ...
The Hacker News

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

Island found dormant JavaScript injection paths in Adblock for YouTube, a Chrome extension with 10M+ installs, raising ...
The Caledonian-Record

ESET Research investigates Russian-aligned Gamaredon group – new toolset, alliances, and a ...

Throughout 2025, the Russia-aligned Gamaredon threat group exclusively targeted governmental and military institutions in Ukraine.Gamaredon operators developed and deployed six new malicious ...
Tech Times

Figma Config 2026: Code Layers Challenge Cursor as GPU Shaders Hit Paid Plans

Figma Config 2026 closed Thursday with Code Layers for GitHub-linked canvas editing, Figma Motion in open beta with CSS and ...
blockonomi

Polymarket Hack: $3M Drained in Supply-Chain Frontend Attack

Polymarket hack stemmed from a compromised third-party vendor that injected malicious JavaScript into the platform’s frontend. Over 11 wallets lost PUSD on Polygon; stolen funds were bridged to ...
SecurityWeek

When Information Becomes the Attack Surface – Understanding AI Agent Traps

AI models producing incorrect answers is hardly a threat, until agents encounter information that’s maliciously designed to influence what it sees, believes, remembers, or executes.