Russian spies had AI rewrite their malware until antivirus missed it
A Russian espionage crew fed their own malware to an AI and told it to keep rewriting the code until security software stopped catching it.
Test sketchy apps in Windows Sandbox
Open a second Windows desktop, install something you don't trust on it, poke at it, then close the window.
Windows malware can steal every passkey in Google Password Manager
Malware on a Windows PC can copy every passkey that Chrome saved to your Google account. Palo Alto Networks' Unit 42 team found three ways to attack Google's synced passkeys.
His Uber Eats orders busted a $220,000 Steam malware ring
A cheap platformer on Steam quietly emptied players' crypto wallets, and the FBI says it tracked down a suspect because of his takeout habit.
Attackers hijacked 1,500 Arch Linux packages to steal developer logins
A free add-on you grabbed for Arch Linux may have quietly stolen your passwords and the saved logins your apps use.
Fake LinkedIn recruiters hide a backdoor that fires on npm install
A recruiter messages a software developer on LinkedIn about a lead-engineer job. She sends a GitHub project and asks him to look at a bug.
10,000 cloned GitHub repos slip trojans past VirusTotal link checks
Search GitHub for a coding tool, pick a project that looks completely real, download its zip file, and you quietly get a trojan instead.
A bad code download steals every password the moment you install it. Red Hat tools are the target.
Hackers hid malware inside a batch of Red Hat npm packages, and it steals your logins the moment you install them.
Dutch police kill off a botnet hiding inside 17 million phones, routers and PCs
Millions of phones, computers and smart-home gadgets were quietly working for criminals, and their owners had no clue.
Poisoned Nx Console update put developer secrets at risk
A compromised Nx Console 18.95.0 release was briefly available in the VS Code extension stores. Nx says the bad release was available on Visual Studio Marketplace and OpenVSX on May 18, 2026.