AI coding agents with exploitable vulnerabilities, cybercrime rings operating like professional enterprises, and new scam ...
Cybersecurity firm Group-IB found the DeadLock ransomware is exploiting Polygon smart contracts to create a resilient ...
A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories ...
The assessment, which it conducted in December 2025, compared five of the best-known vibe coding tools — Claude Code, OpenAI Codex, Cursor, Replit, and Devin — by using pre-defined prompts to build ...
Microsoft has fixed a vulnerability in its Copilot AI assistant that allowed hackers to pluck a host of sensitive user data ...
Magecart web skimming campaign active since 2022 stealing credit card and personal data from compromised e-commerce checkout ...
Russian state-sponsored group APT28 has targeted energy research, defense collaboration, and government communication ...
Ledger, a hardware wallet manufacturer, which has historically been known by the reputation of keeping crypto assets offline, has suffered another data exposure incident and has brought back old ...
The researchers initially discovered DarkSpectre while investigating ShadyPanda, a campaign based on popular Chrome and Edge extensions that infected over four million devices. Further analysis ...
A new cybercrime tool called ErrTraffic allows threat actors to automate ClickFix attacks by generating 'fake glitches' on ...
A massive security breach recently forced Ubisoft to take Rainbow Six Siege servers offline after a multi-group hack compromised internal systems. Attackers flooded player accounts with billions in ...
In a nutshell, the hackers are using one-time codes from OAuth 2.0, an open standard that is supposed to be used to authenticate smart TVs and the like. Typically, the scammers pretend that a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback