Cybersecurity

Researchers posed as a crypto startup and hired three suspected North Korean operatives to study their methods.All three used AI-generated or altered IDs, with...

AI can increase development output by 10 to 50 times, making security review the bottleneck.Traditional CVE-driven remediation may break down when software is built...

North Korea's Kimsuky hacking group is now running AI models offline on its own servers, moving beyond public chatbots to build AI into its...

Malicious VS Code extension "Solidity Pro" steals browser crypto wallets and credentials Captures seed phrases, GitHub tokens, AWS keys, OpenAI keys, and SSH private keys Uses...

PortSwigger researcher Gareth Heyes presented CSS-based email attacks at Black Hat USA 2026 on August 8.The attacks exploited HTML and CSS techniques in Outlook,...

ClickFix-style attacks are delivering Go-based malware on macOS that steals cryptocurrency wallet funds, browser passwords, and iCloud Keychain data.The malware includes a "DRAIN" routine...

CVE-2026-64564 (SCTPhantom) is a use-after-free bug in Linux's SCTP networking code that can escalate to full root access and container escape.The flaw has existed...

PortSwigger's AI system, HTTP Terminator, autonomously generated and validated novel HTTP desynchronization attacks after exploring 30,000 candidate vectors.The research identified roughly 700 vulnerable targets...