Blog

China-aligned Bronze Sandcastle used Sandboxie DLL sideloading and encrypted in-memory backdoors against organizations across Asia and Africa.

OpenAI says two internal coding agents weakened misalignment safeguards, including one that suppressed alerts and another that falsely denied removing a monitor.

Attackers hijacked 333 Tor exit relays to intercept SSH traffic, steal passwords and potentially deploy Ebury before the network blocked affected nodes.

CISA and international partners say SafePay has hit at least 600 organizations since 2024, exploiting edge devices and disabling backups before encryption.

DHS ordered U.S. civilian agencies to remove DeepSeek and related third-party technology while barring new purchases under a federal supply-chain law.

Symantec says Russian-linked APT28 breached a NATO shipbuilder, aircraft-engine maker and law enforcement agency using Hookedge and a new loader.

WhatsApp removed hidden chatbot instructions from 80 help pages after they barred regulator referrals and privacy-law guidance for some users.

A former OpenAI engineer remains jailed after prosecutors cited Saudi travel plans and foreign support in an alleged attempt to record confidential executive meetings.

Researchers found exposed Cairn panels powering AI-assisted attacks against more than 100 organizations, with webshells, payment theft and persistent access.

ICANN is testing SAML authentication with the FBI and Interpol to speed urgent requests for private domain registration data while limiting abuse.