Poisoned AsyncAPI Packages Ran Code When Developers Imported Them
Five poisoned releases avoided install hooks, launching a detached Node.js process when developer or CI tooling loaded the affected module.
Read article →threats
Threat actors, malware campaigns, phishing, exploitation, and incident activity.
Gemini CLI Rebuilt Botnet Command Infrastructure in Six Minutes
Trend Micro found a Russian-speaking actor using Gemini CLI to rebuild command-and-control infrastructure and operate eight infected computers.
Read article →
NadMesh Scans Exposed AI Services for Cloud Credentials
The botnet gives AI workbenches priority in its scan queue, then searches compromised hosts for cloud credentials, service-account tokens, and callable tools.
Read article →
Fake Claude Installers Delivered SectopRAT to 29 Organizations
A paid search ad sent victims through a public page on claude.ai before delivering a fake desktop installer.
Read article →Showing 105–108 of 108