IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...

A convincing lookalike of the popular Huorong Security antivirus has been used to deliver ValleyRAT, a sophisticated Remote ...

ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software ...

A fake CAPTCHA scam is tricking Windows users into running PowerShell commands that install StealC malware and steal passwords, crypto wallets, and more.

Anthropic's Opus 4.6 system card breaks out prompt injection attack success rates by surface, attempt count, and safeguard configuration — data that OpenAI and Google have not published for their own ...

Shanon is an open source AI pentester built on the Claude SDK; runs cost about $60 in API credits, with CI/CD support; ...

A team led by investigators at Mass General Brigham and Dana-Farber Cancer Institute has shown that a single injection of an oncolytic virus—a genetically modified virus that selectively infects and ...

GLP-1 medications, such as Ozempic and Wegovy, are injected into the fatty layer beneath the skin to manage blood sugar and aid in weight management. The recommended injection sites include the ...

The World Anti-Doping Agency is investigating whether ski jumpers were injecting their penises with hyaluronic acid in order to fly further In the quest for Olympic gold, professional athletes endure ...

Self-hosted agents execute code with durable credentials and process untrusted input. This creates dual supply chain risk, ...

A Virginia healthcare worker has drawn intense criticism and legal scrutiny after posting videos that appear to encourage people to inject US Immigration and Customs Enforcement (ICE) agents with ...

Zero-day exploits, AI-driven Android malware, firmware backdoors, password manager trust gaps, rising DDoS define this week’s critical cyber threats.