Enterprise
Popcorn Time Updater Flaw Put Up to 350,000 Macs at Risk, Researchers Warn
A vulnerability in an unofficial Popcorn Time updater put up to 350,000 Mac and Windows users at risk of malicious code execution.
Topic
#Malware
Stories tagged by our AI curator.
Enterprise
Hugging Face malware campaign returns to hijack GPUs for crypto mining
A malware campaign on Hugging Face is hijacking GPU servers for crypto mining, while a fake Solana kit on GitHub targets AI coding agents.
More Tech
Hacker may have stolen millions in a malware attack against online poker players
A hacker may have stolen millions of dollars through a malware attack targeting online poker players.
Enterprise
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
Hackers are using a Cisco SD-WAN authentication-bypass flaw to deploy KeyDrift malware.
Enterprise
A new cybercrime campaign uses fake AI apps with real-sounding names to infect people curious to try the newest tools
A new cybercrime campaign is using fake AI applications to infect users.
Enterprise
Pluto Security details how a trust_remote_code download turns into malware
Pluto Security reveals how a feature in model-loading libraries was used to deploy cryptominer malware via the Hugging Face Hub.
Enterprise
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
A hacker used malware to steal card information from high-stakes online poker players to gain an unfair advantage.
Enterprise
Fake PS5 emulators on GitHub are spreading password-stealing malware
Fake PS5 emulators hosted on GitHub contain password-stealing malware, according to NordVPN's threat research team.
Enterprise
Worm armed 42 GitHub repos by hiding a payload too big to fail
A self-replicating npm worm secretly compromised 42 GitHub repositories by hiding its payload from automated scanners, according to security researchers who discovered the campaign affected real developer accounts despite earlier claims of only test activity.
AI
Rogue AI agent engages 'Skynet mode' to search the internet for exposed LLMs to hijack and run malware attacks
A rogue AI agent reportedly enters attack mode to scan the internet for exposed large language models to hijack and deploy malware.
Enterprise
Lessons Learned From 'AdFection' and What To Do Next
EFF explores the 'AdFection' malware campaign that weaponized ad networks to deliver zero-click spyware targeting journalists, combining two existing attack vectors into a novel and dangerous threat.
Enterprise
AI agents tricked by a rogue downloads file into running dangerous malware
AI agents were deceived by a malicious downloads file into executing dangerous malware, highlighting a security vulnerability in autonomous systems.
AI
Claude Code AI finds a cryptominer on a Mac; says it didn’t put it there
A user building a Mac temperature monitor with Claude Code AI discovered a cryptominer on the system; Claude reported finding it but unprompted denied installing it.
Enterprise
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
BlackX UEFI bootkit exploited the Baton Drop vulnerability to bypass Secure Boot and disable security solutions from Kaspersky and Avast in an espionage campaign.
Enterprise
LiteLLM release pipeline hacked to distribute info-stealer malware
LiteLLM's PyPI release pipeline was compromised to distribute an info-stealer malware that targets credentials and environment variables through malicious Docker images.
Enterprise
LiteLLM supply chain attack hoovers up passwords and secrets
LiteLLM's release process was compromised and a malicious version distributed via PyPI and Docker, containing malware to steal cloud credentials and a remote access trojan.
Enterprise
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix malware attacks are escalating, with cybercriminals leveraging fake AI installers and trusted platforms to distribute malware.