Attackers are reviving the Evil MSI (Microsoft Installer) technique, leveraging BASE64 encoding and statistical obfuscation to bypass detection mechanisms. This campaign exploits Windows Installer’s legitimate functionality to execute malicious payloads while evading traditional signature-based secu
Cybercriminals have developed a sophisticated malware distribution campaign embedding the newly discovered Argamal malware within fully functional adult-themed video games. Unlike typical trojanized software that fails to deliver promised functionality, these games work as advertised while silently
The FBI has successfully dismantled a sophisticated AI-powered phishing-as-a-service operation that leveraged over one million malicious URLs to target victims globally. This groundbreaking takedown marks one of the first major law enforcement actions against cybercriminal infrastructure enhanced by
Recent testing reveals that large language models (LLMs) consistently fail to validate factual accuracy, accepting completely fabricated data as legitimate input. Despite advanced prompting techniques, AI models demonstrate they’re fundamentally code-based systems with inherent limitations that cann
Security researchers have discovered a critical zero-click vulnerability in Google’s Pixel 10 Visual Processing Unit (VPU) driver that allows attackers to gain root access with merely five lines of code. The exploit chain, dubbed “When a Door Closes, a Window Opens,” bypasses multiple security layer
Maine’s Office of the Attorney General temporarily suspended its data breach notification portal after discovering fraudulent breach filings claiming VRChat and Discord had exposed millions of user records. The incident exposed critical flaws in the state’s breach reporting system, including lack of
A former IT employee of a U.S. school district has been sentenced to jail for launching retaliatory cyberattacks against their previous employer. The attacks disrupted educational operations, compromised system integrity, and highlighted the significant insider threat posed by disgruntled former emp
A newly discovered attack technique called “Agentjacking” allows threat actors to hijack AI coding assistants and force them to execute malicious code from attacker-controlled servers. The attack exploits the autonomous nature of AI agents that can read files, execute commands, and make decisions wi
A Ukrainian national has pleaded guilty in U.S. federal court to participating in the notorious Conti ransomware operation, one of the most prolific cybercrime syndicates in recent history. Following his extradition, the defendant admitted to deploying ransomware, exfiltrating sensitive data, and fa
BugHunter, a new open-source bug bounty toolkit leveraging Claude AI and free AI providers, has been released to the security community. The tool automates vulnerability discovery, reconnaissance, and exploit generation workflows by integrating large language models into traditional security testing