Transparent Tribe (APT36) is linked to new cyber-espionage attacks using malicious LNK files, adaptive RATs, and long-term ...

A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell ...

China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.

A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.

The Python Package Index (PyPI), run by the Python Software Foundation, has officially invalidated all the publishing tokens that were stolen in the GhostAction supply chain attack that happened ...

Mac malware campaign uses fake AI chat results to deliver AMOS through terminal commands, security researchers report.

An AI-powered penetration testing tool is automating offensive cybersecurity, accelerating vulnerability discovery and ...

You might be staring at your budget, wondering how you’re supposed to cover rent, debt, and everything else on $20–$25 an ...

Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks ...

Security researchers uncovered a range of cyber issues targeting AI systems that users and developers should be aware of — ...

Ever since reporting earlier this year on how easy it is to trick an agentic browser, I've been following the intersections between modern AI and old-school scams. Now, there's a new convergence on ...

How cybercriminals and organized cargo thieves stole 40,000 pounds of lobster using hacked load boards, fictitious pickups ...