A website styled to look like a Google Account security page is distributing what Malwarebytes describes as one of ...

Executive Summary We identified a security weakness in n8n’s credential management layer that could have completely ...

A malicious npm package disguised as a legitimate AI tool to install the virally popular OpenClaw, but designed to steal system passwords and crypto wallets, has been identified by cybersecurity ...

Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 ...

ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users ...

Don't leave your OpenClaw with an easy password ...

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be the first documented case of attackers abusing the Deno JavaScript runtime ...

The Oasis researchers document a vulnerability chain that can be initiated from any website the AI agent (or its user) visits ...

Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and ...

GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a ...

A data breach at data analytics company LexisNexis L&P has leaked the details of over 400,000 cloud profiles after an ...

Project initiated by Nuxt lead Daniel Roe attracts wide support thanks to multiple issues with the official interface A new ...