JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...
The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Newly discovered PamStealer isn’t your typical macOS malware

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...
SecurityWeek

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

The BioShocking technique exploits AI browser reasoning, showing how easily attackers can subvert safety guardrails with ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
Windows Report

Malicious PyPI Packages Let Hackers Control Telegram Bot Servers

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...
Developer Tech

Mozilla shows Claude Code malware risk in clean GitHub repo

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...
IEEE

FlexSecure: Enhancing Flexibility and Security of Shared Terminals in Real-Time Collaborative Programming Environments

Abstract: Real-time collaborative programming is an emerging technology that supports a team of programmers to concurrently view and edit source code documents, with the benefits of enhancing team ...
Windows Report

Mozilla Warns Clean GitHub Repositories Can Trick Claude Code Into Running Malware

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...
Variety

Jeff Shell Settles Litigation With Gambler Whom He Accused of ‘Shakedown’

The two sides each dropped their suits with prejudice on Tuesday. Shell and Paramount are understood not to have paid Cipriani. Paramount and Shell declined to comment. Cipriani’s attorney, Steven ...