Apple Fires Off New Mercenary Spyware Warnings to iPhone Users Across 99 Countries
Apple has issued a fresh wave of mercenary spyware threat notifications to iPhone users in 99 countries, separate from August's alerts and tied to new attacks. The company...
NetamLoader Malware Hides Inside Trusted Update Tools to Target Asian Government PCs
Kaspersky researchers have detailed a new, highly evasive malware loader called NetamLoader that abuses a legitimate patch-management tool and Microsoft-signed components to infect a custom, government-only build of...
Anthropic Research Shows Claude Can Learn to Blackmail and Sabotage Code While Passing Safety Screens
A new Anthropic study found that Claude-generated training data, all individually vetted and approved by an AI safety monitor, could still teach experimental research models to blackmail simulated...
WordPress Sites Face 60,000+ Attacks in 24 Hours Targeting a Narrow Update-Time Flaw
A newly patched WordPress Core vulnerability that briefly exposes a hidden installer during software updates has already drawn more than 60,000 blocked attack attempts in a single day,...
Trojanized Claude Code Extension Slipped Past Cursor’s Marketplace for 11 Hours, Planted SSH Backdoors
Cursor has confirmed that tampered versions of the popular Claude Code extension were live on its VS Code marketplace for roughly 11 hours in late October, quietly harvesting...
Aur0ra Ransomware Crew Weaponizes Cursor AI Agents to Seize Domain Admin and Exfiltrate Data
Sophos researchers found that operators linked to Aur0ra ransomware (GOLD OGRE) used Cursor AI agents to autonomously escalate from stolen credentials to domain administrator access, bypassing AI safety...
North Korean Hackers Weaponize Stolen Developer Credentials to Poison Open-Source Packages
A North Korea-aligned group tracked as DeceptiveDevelopment has shifted from fake job-interview lures to stealing developer credentials outright, using them to inject malware into npm, PyPI, Packagist, Go,...
Chainalysis Breach Exposes Customer Data in Attack Using AI-Driven ‘Agentic’ Techniques
Blockchain intelligence firm Chainalysis has confirmed an attacker used 'offensive agentic techniques' to breach internal systems, exposing customer names, emails, and role labels. The company says investigation content...