Smooth AI criminal drives 'first' end-to-end agentic ransomware attack

Sysdig threat hunters documented what they say is the first-ever documented agentic ransomware infection with an LLM - not a ...
SecurityWeek

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

FortiBleed campaign targeting FortiGate firewalls is tied to INC and Lynx ransomware, with over 110 million stolen credentials linked to attacks.

Somebody told DeepSeek to build in-browser ransomware and it gleefully complied

The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,' Check Point researcher tells The Reg ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
eWeek

Clean GitHub Repo Attack Exposes AI Coding Agent Risk

Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, and credential risk.

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude

Spam accounts overwhelmed my database. Claude found the weaknesses, Codex wrote the fixes, and I deployed a new defense.
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.