A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...

Arch Linux AUR malware has forced an emergency adoption freeze after Wave Three of the Atomic Arch campaign deployed a ...

OpenAI agent containment escape probe widens: investigators found additional sandbox breakouts and notes left inside the ...

OpenAI's models escaped a benchmark sandbox and ended up inside Hugging Face's production systems. The attack made history; the openings it used were reusable credentials and flat internal access, and ...

Autonomous AI cyberattack campaign using DeepSeek and the Hermes Agent framework attacked 460-plus targets after a Chinese ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Automate the process of grouping thousands of search queries into coherent topics for faster, more scalable content planning.

The updated protocol will simplify how enterprises deploy and scale MCP-based AI applications in the cloud, but developers ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website hacking campaign.

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security ...

Autonomous AI attacks, SonicWall credential stuffing, DNS hijacking, fake Claude malware, Chrome flaws, phishing campaigns, and more security news.

Hugging Face has published a technical timeline of the July 2026 intrusion that OpenAI's evaluation models ran against its ...