Google's synced passkeys can be stolen by malware
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager
Malware & Ransomware
Russian spies turn public Wi-Fi into malware delivery systems
Keyloggers, audio-visual surveillance, and token theft on CaptivePortal
AUR malware wave forces Arch Linux to disable every package push
Arch Linux disabled every push to the Arch User Repository after renewed malicious package takeovers exposed weaknesses in its community software workflow.
Arch Linux disables AUR package adoption to stop malware flood
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages.
Xcsset is back: macOS malware that worms through Xcode projects
Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching and AI to decode its logic.
US bank places trust in ransomware crew that promised to delete its data
History suggests this was not wise
Kimi K3 and GLM 5.2 can create undetectable malware for $2
As part of Incalmo’s mission to make AI safely ubiquitous, we do safety research on the frontier cyber capabilities of models. Recently, to help anti-virus systems stay ahead of the OSS threat frontier, we created PathoGen, a novel system that turns (open) models1 into evasive…
NPM publish-time malware scanning and dual-use metadata
As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…
Malware Problem
Coverage of: Malware Problem
Coca-Cola suspended production at its Fairlife dairy after a ransomware attack
Coca Cola said dairy production at its Fairlife unit will "remain suspended" in the United States following a hack.
Hospital Chain Hit by Ransomware, Patient Care Diverted for Days
The attack encrypted clinical systems across 14 facilities, forcing staff to revert to paper records and divert emergency patients.
Botnet of 400,000 Infected Routers Dismantled by International Task Force
The botnet powered DDoS-for-hire services and proxy networks used to anonymize criminal traffic worldwide.