An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...
One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...
A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...
An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian ...
Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...
LabubaRAT poses as NVIDIA software, profiles security tools, and uses HTTPS, WebView2, or DNS tunneling to maintain remote ...
Red, an in-house AI hacker that attacks its own models to harden GPT-5.6 against prompt injection, and it works too well to release.