Attackers operated an active C2 implant for up to a week and compromised AppSec vendor Xygeni's xygeni/xygeni-action in that time.

Storm-2561 uses SEO poisoning to push fake VPN downloads that install signed trojans and steal VPN credentials. Active since 2025, Storm-2561 mimics trusted brands and abuses legitimate services. This ...

Fake OpenClaw installers on GitHub deployed credential stealers and a proxy tool linked to the Black Basta ransomware group, while Bing's AI served the malicious ...

A threat actor tracked as Storm-2561 is distributing fake enterprise VPN clients from Ivanti, Cisco, and Fortinet to steal ...

The financially motivated group has been active since May 2025, impersonating Fortinet, Ivanti, Cisco, and other vendors to steal corporate credentials.

Storm-2561 spreads fake VPN installers via SEO poisoning and GitHub downloads, stealing enterprise VPN credentials with Hyrax malware.

CNCERT warns OpenClaw AI agent has weak defaults enabling prompt injection and data leaks, prompting China to restrict use on government systems.

Perplexity Personal Computer software can turn a Mac mini into a personal AI project manager. But should you give it access ...

Anthropic launches Code Review for Claude Code, a multi-agent AI system that audits pull requests for bugs at $15–$25 per review, as the company sues the Trump administration over a Pentagon “supply ...

The eSignGlobal team has launched esign-automation, a new skill that allows eSignGlobal users to execute online electronic contract signings via natural language interaction with the OpenClaw ...

Google report: AI is accelerating cloud cyberattacks, and one weak link stands out ...

The excitement around Cisco's latest SD-WAN bugs has inspired some light fraud, misunderstandings, and overlooked risks.