A password reset attack hit X (Twitter) on Tuesday. X found no breach and blames attackers chasing X Money wallets.

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an ...

Thirteen malicious Composer themes on Packagist are being used to deliver iOS spyware that steals messages, passwords, and ...

Polygon Labs disclosed it patched a batch of security vulnerabilities through two hard forks—Austin on its Bor client and ...

A previously undocumented malware loader, dubbed SynkLoader, that combines Python, C#, and native C++ components to evade ...

SynkLoader malware is spreading through Microsoft Teams phishing, using a fake Windows lock screen to steal credentials and enable remote access.

The implant ensures defenders only see legit Microsoft services rather than unknown external domains, making it more challenging to block attacks.

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP ...

Bob Bramblet is a Lee County Sheriff's Office employee, outdoorsman, and award-winning writer. He hunts invasive Burmese pythons in the Everglades to protect native wildlife. Bramblet has written a ...

Microsoft released a record number of security patches for Windows, Office, and other tech product lines this week, citing the use of AI to aid the discovery of code vulnerabilities. The technology ...

As a genre, the “award acceptance lecture” is little more than a formality and a banality. But there is at least one charming exception to this rule—the talks given by the foremost computer scientists ...