In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an ...

The GigaWiper backdoor combines several malware families and can sabotage systems using a wiper, encryption, and wiping ...

Five minutes to stop being watched ...

The modular Golang backdoor combines remote administration, multiple disk-wiping logics, and a Crucio-derived ransomware ...

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...

A 19-year-old walked through Helsinki airport in April 2026 carrying two 2TB hard drives and a ticket to Japan. He couldn’t make that flight. Finnish police stopped him on an Interpol Red Notice, and ...

A verified X ad and a routine browser habit are being used to hijack Mac users and Microsoft 365 accounts alike. Here’s ...

Windows Defender zero-day CVE-2026-50656 — known as RoguePlanet — has been patched by Microsoft 29 days after researcher ...

Sophos CIXA 行为引擎的最新分析表明，这些工具模糊了良性自动化与通常与攻击者相关联的活动之间的界限。 Claude Code、Cursor 和 OpenAI Codex 等 AI 编程 Agent 正越来越多地出现在企业环境中，最新遥测数据显示，它们会无意间触发与凭据访问和合法二进制文件滥用（LOLBins）相关的安全检测规则。 AI 工具模糊了自动化与攻击行为的界限 Sophos CI ...