A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...

ESET APT report 2026 reveals Belarus-aligned hackers conducted the first-ever destructive cyberattack by a Belarus-linked ...

The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...

A Hugging Face model loaded with trust_remote_code ran a cryptominer, and in some builds a reverse shell. Every scanner ...

Hackers exploit ClickFix to deploy malware loaders and Python tunnels on Windows, potentially enabling ransomware attacks.

North Korean hackers hijack developer credentials to inject malware into trusted software projects, compromising downstream ...

LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was ...

Stolen tokens and unrotated credentials drove a wave of supply chain attacks. Use these steps to protect your pipeline and your customers.

KongTuke is a criminal web traffic network behind fake CAPTCHA pages and the CrashFix browser extension scam on Windows. What ...

The FBI attributes a $6 billion-plus crypto theft to North Korea-linked TraderTraitor as investigators track laundering ...