During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...
Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.
ThreatsDay Bulletin covers stealthy attack trends, evolving phishing tactics, supply chain risks, and how familiar tools are ...
CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across ...
Use Playerctl, Python, and Conky timer to create a 'now playing' Spotify desktop widget.
A phishing campaign targeting healthcare, government, hospitality, and education sectors uses several evasion techniques to ...
AI管理ライブラリの「LiteLLM」がサプライチェーン攻撃を受け、一時的に悪意ある変更を含んだマルウェア版が配布されていたことが判明しました。LiteLLMのマルウェア版ではユーザーのSSHキーやAPIキーを盗み出すスクリプトが動作していたことも判 ...