A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell ...

China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.

A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.

An AI-powered penetration testing tool is automating offensive cybersecurity, accelerating vulnerability discovery and ...

The Python Package Index (PyPI), run by the Python Software Foundation, has officially invalidated all the publishing tokens that were stolen in the GhostAction supply chain attack that happened ...

You might be staring at your budget, wondering how you’re supposed to cover rent, debt, and everything else on $20–$25 an ...

North Korea shifted its strategy to patiently target "bigger fish" for larger payouts, using sophisticated methods to execute ...

Explore Infosecurity Magazine’s most-read cybersecurity stories of 2025, from major vendor shake-ups and zero-day exploits to AI-driven threats and supply chain attacks ...

Security researchers uncovered a range of cyber issues targeting AI systems that users and developers should be aware of — ...

A groundbreaking discovery could bring us closer to a cure for HIV. Scientists at Ulm University Hospital have identified a ...

Ever since reporting earlier this year on how easy it is to trick an agentic browser, I've been following the intersections between modern AI and old-school scams. Now, there's a new convergence on ...

The company suffered one sophisticated five-alarm campaign and one messy spray-and-pray attack, mere days apart.