Our '7 Days' weekly tech roundup brings the juiciest announcements. Read about Edge browser handling passwords in plaintext, JDownloader getting hacked, and the TAB key.
Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.
New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...
The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...
CRPx0 is a complex, stealthy malware campaign that targets macOS and Windows systems, and appears to have Linux capabilities ...
The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a ...
Cybersecurity firm Kaspersky attributed a global wave of phishing attacks to the SilverFox threat group masquerading as tax ...
In early May, the JDownloader website delivered malware. This is reminiscent of Daemon Tools, which have since reacted.
An attacker poisoned 84 TanStack npm versions across 42 packages, stealing GitHub OIDC tokens and cloud keys while planting a ...
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...