AI coding agents are highly vulnerable to zero-click attacks hidden in simple prompts on websites and repositories, a ...

A new cyber threat called ClickFix is reportedly spreading rapidly online, using fake emails, websites and search results to trick users into pasting a single line of code that instantly infects their ...

Microsoft 365 is under attack, China and Russia afflited hackers suspected. Updated December 23 with advice from a mobile security solutions expert regarding the Russian device code attacks targeting ...

Qiang Tang receives funding from Google via Digital Future Initiative to support the research on this project. Moti Yung works for Google as a distinguished research scientist. Yanan Li is supported ...

For the first time in history, cyber malicious actors have used Anthropic’s Claude Code, a generative AI coding assistant, to conduct cyber-attacks. The attackers are likely Chinese state-sponsored ...

Cybersecurity firm F5 Networks says government-backed hackers had “long-term, persistent access” to its network, which allowed them to steal the company’s source code and customer information. In a ...

Multiple Russian nation-state actors are targeting sensitive Microsoft 365 accounts via device code authentication phishing, a new analysis by Volexity has revealed. The firm first observed this ...

Hackers are moving from smart contract vulnerabilities to exploiting human behavioural weaknesses, according to the co-founder of Web3 cybersecurity firm CertiK. Cryptocurrency hackers are moving away ...

In context: WhatsApp is one of the most popular communication platforms of all time with around three billion users worldwide. This means that even the slightest security flaw in the app could pose a ...