Hackers are spreading a Python-based malware kit called ArmorSteal through fake software download pages. The kit steals ...

This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs, and more.

PHP2Shell attacks remain unsuccessful as researchers demonstrate an ASLR bypass enabling RCE on production-configured PHP systems.

Have you ever counted the computers in your house? Tally them up now. I’ll wait. You’re probably including your desktop and laptop computers, if you own some. I bet you’re also including the ...

China's Foreign Minister Wang Yi (C) looks on during a bilateral meeting with US Secretary of State Marco Rubio on the sidelines of the Association of Southeast Asian Nations (ASEAN) Foreign Ministers ...

Exposed WordPress backups have become a valuable source of cloud and email credentials for attackers using a toolkit called TIKTOUK. Rather than relying on one technique, its components search ...

A newly discovered Docker botnet is implanting AI agents onto compromised hosts in order to send stolen credentials back to the attackers. ThreatDown researchers recently uncovered Carbonato, a botnet ...

A previously undocumented Windows botnet dubbed x47.c has been found offering 18 attack methods, including one designed to drain victims' paid AI credits. According to research published by Qrator ...

A hot potato: Once again, a warning about AI development resulting in a catastrophe has come from one of the people building these models. Anthropic boss Dario Amodei says that an AI-powered botnet ...

Sality, a peer-to-peer (P2P) botnet that had been running for 23 years and infecting more than 15,000 machines worldwide, has been taken down in a joint operation by international law enforcement ...

The FBI has seized a series of domains that were used by a large-scale botnet to coordinate and launch China-backed cyberattacks against American targets. According to the Justice Department’s ...

Security researchers at Nozomi Networks Labs have disclosed a previously unknown IoT botnet, named Tengu, that turns one of embedded hardware's most fundamental safety features against the people ...